IBM DB2 to_char and to_date Denial Of Service (#NISR05012005G)

NGSSoftware Insight Security Research Advisory Name: IBM DB2 tochar and todate Denial Of Service Systems Affected: DB2 8.1 Severity: High risk from local Vendor URL: http://www.ibm.com/ Author: Chris Anley chris at ngssoftware.com Relates to: http://www.ngssoftware.com/advisories/db2-02.txt Date ...

CVE-2004-2148

Unknown local vulnerability in the "change user" feature of Slava Astashonok Fprobe 1.0.5 and earlier has unknown impact and attack vectors...

Solaris 8/9 passwd - 'circ()' Local Privilege Escalation

/ $Id: raptorpasswd.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorpasswd.c - passwd circ local, Solaris/SPARC 8/9 Copyright c 2004 Marco Ivaldi Unknown vulnerability in passwd1 in Solaris 8.0 and 9.0 allows local users to gain privileges via unknown attack vectors CAN-2004-0360. "Those of you...

[SECURITY] [DSA 615-1] New debmake package fixes insecure temporary directories

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 615-1 [email protected] http://www.debian.org/security/ Martin Schulze December 22nd, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 610-1] New cscope packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 610-1 [email protected] http://www.debian.org/security/ Martin Schulze December 17th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 610-1] New cscope packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 610-1 [email protected] http://www.debian.org/security/ Martin Schulze December 17th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 596-2] New sudo packages removes debug output

-------------------------------------------------------------------------- Debian Security Advisory DSA 596-2 [email protected] http://www.debian.org/security/ Martin Schulze November 24th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 596-1] New sudo packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 596-1 [email protected] http://www.debian.org/security/ Martin Schulze November 24th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 588-1] New gzip packages fix insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 588-1 [email protected] http://www.debian.org/security/ Martin Schulze November 8th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 588-1] New gzip packages fix insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 588-1 [email protected] http://www.debian.org/security/ Martin Schulze November 8th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 583-1] New lvm10 packages fix insecure temporary directory

-------------------------------------------------------------------------- Debian Security Advisory DSA 583-1 [email protected] http://www.debian.org/security/ Martin Schulze November 3rd, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 583-1] New lvm10 packages fix insecure temporary directory

-------------------------------------------------------------------------- Debian Security Advisory DSA 583-1 [email protected] http://www.debian.org/security/ Martin Schulze November 3rd, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 577-1] New postgresql packages fix symlink vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 577-1 [email protected] http://www.debian.org/security/ Martin Schulze October 29th, 2004 http://www.debian.org/security/faq -...

advisory-07-nsg.txt

------------------------------------------------- No System Group - Advisory 07 - 18/10/04 ------------------------------------------------- Program: Socat Homepage: http://www.dest-unreach.org/socat/ Vulnerable Versions: Socat 1.4.0.2 and below Risk: Low / Medium Impact: Local Format String...

socat <= 1.4.0.2 Local Format String Exploit (not setuid)

No description provided by source. / socatexp.c Socat Format String Vulnerability socat = 1.4.0.2 local exploit Proof of Concept Tested in Slackware 9.0 / 9.1 / 10.0 by CoKi [email protected] No System Group - http://www.nosystem.com.ar coki@servidor:$ make socatexp coki@servidor:$ ./socatexp...

[SECURITY] [DSA 566-1] New CUPS packages fix information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 566-1 [email protected] http://www.debian.org/security/ Martin Schulze October 14th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 559-1] New net-acct packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 559-1 [email protected] http://www.debian.org/security/ Martin Schulze October 6th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 559-1] New net-acct packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 559-1 [email protected] http://www.debian.org/security/ Martin Schulze October 6th, 2004 http://www.debian.org/security/faq -...

[slackware-security] getmail

New getmail packages are available for Slackware 9.1, 10.0 and -current to fix a security issue. If getmail is used as root to deliver to user owned files or directories, it can be made to overwrite system files. More details about this issue may be found in the Common Vulnerabilities and Exposur...

[SECURITY] [DSA 557-1] New rp-pppoe packages fix potential root compromise

-------------------------------------------------------------------------- Debian Security Advisory DSA 557-1 [email protected] http://www.debian.org/security/ Martin Schulze October 4th, 2004 http://www.debian.org/security/faq -...