xfinder-ds.pl

HEADER: OSX Finder DSStore arbitrary file overwrite vulnerability. CONTACT: vade79 - [email protected] fakehalo/realhalo CATEGORY: Local with user intervention. IMPACT: Privilege escalation. REFERENCE: http://fakehalo.us/xfinder-ds.pl BACKGROUND: The Finder is the application that Mac OS X and earli...

[SECURITY] [DSA 684-1] New typespeed packages fix arbitrary group games code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 684-1 [email protected] http://www.debian.org/security/ Martin Schulze February 16th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 679-1] New toolchain-source package fixes insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 679-1 [email protected] http://www.debian.org/security/ Martin Schulze February 14th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 679-1] New toolchain-source package fixes insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 679-1 [email protected] http://www.debian.org/security/ Martin Schulze February 14th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 676-1] New xpcd packages fix arbitrary code execution as root

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 676-1 security debian org http://www.debian.org/security/ Martin Schulze February 11th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 675-1] New hztty packages fix local utmp exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 675-1 [email protected] http://www.debian.org/security/ Martin Schulze February 10th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 675-1] New hztty packages fix local utmp exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 675-1 [email protected] http://www.debian.org/security/ Martin Schulze February 10th, 2005 http://www.debian.org/security/faq -...

CVE-2005-0261

CVE-2005-0261 affects AIX 5.2, 5.3, and possibly earlier versions. The vulnerability arises because lspath does not drop privileges before processing the -f option, enabling a local user to read a single line from arbitrary files. The connected documents do not provide a patch version or explicit...

[SECURITY] [DSA 672-1] New xview packages fix potential arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 672-1 [email protected] http://www.debian.org/security/ Martin Schulze February 9th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 667-1] New PostgreSQL packages fix arbitrary library loading

-------------------------------------------------------------------------- Debian Security Advisory DSA 667-1 [email protected] http://www.debian.org/security/ Martin Schulze February 4th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 664-1] New cpio packages fix insecure file permissions

-------------------------------------------------------------------------- Debian Security Advisory DSA 664-1 [email protected] http://www.debian.org/security/ Martin Schulze February 2nd, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 664-1] New cpio packages fix insecure file permissions

-------------------------------------------------------------------------- Debian Security Advisory DSA 664-1 [email protected] http://www.debian.org/security/ Martin Schulze February 2nd, 2005 http://www.debian.org/security/faq -...

DMA-2005-0127a.txt

DMA2005-0127a - 'Apple OSX batch family poor use of setuid' Author: Kevin Finisterre Vendor: http://www.apple.com/macosx/ Product: at commands = Mac OS X v10.3.7, Mac OS X Server v10.3.7 References: CAN-2005-0125 http://www.digitalmunition.com/DMA2005-0127a.txt...

[SECURITY] [DSA 658-1] New libdbi-perl packages fix insecure temporary file

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 658-1 [email protected] http://www.debian.org/security/ Martin Schulze January 25th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 658-1] New libdbi-perl packages fix insecure temporary file

-------------------------------------------------------------------------- Debian Security Advisory DSA 658-1 [email protected] http://www.debian.org/security/ Martin Schulze January 25th, 2005 http://www.debian.org/security/faq -...

Darwin Kernel 7.1 - Mach File Parsing Local Integer Overflow

Darwin Kernel 7.1 - Mach File Parsing Local Integer Overflow / source: https://www.securityfocus.com/bid/12314/info Reportedly a local integer overflow vulnerability affects the Darwin Kernel. This issue is due to a failure of the affected to properly handle integer signedness. An attacker may...

Darwin Kernel 7.1 - Mach File Parsing Local Integer Overflow

/ source: https://www.securityfocus.com/bid/12314/info Reportedly a local integer overflow vulnerability affects the Darwin Kernel. This issue is due to a failure of the affected to properly handle integer signedness. An attacker may leverage this issue to cause the affected computer to crash,...

[SECURITY] [DSA 640-1] New gatos packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 640-1 [email protected] http://www.debian.org/security/ Martin Schulze January 17th, 2005 http://www.debian.org/security/faq -...

Mod_dosevasive symlink and race vulnerability

LSS Security Advisory LSS-2005-01-01 http://security.lss.hr --- Title : Moddosevasive symlink and race vulnerability Advisory ID : LSS-2005-01-4 Date : January 1th, 2005 Advisory URL: : http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-01 Impact : Arbitrary file creation Risk level ...

LSS-2005-01-03.txt

LSS Security Advisory LSS-2005-01-03 http://security.lss.hr --- Title : Squirrelmail vacation v0.15 local root exploit Advisory ID : LSS-2005-01-03 Date : 10.01.2005. Advisory URL: : http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-03 Impact : Privilege escalation and arbitrary fil...