[Full-disclosure] [MU-200704-01] Pre-Authentication Vulnerability in Mac OS X RPC runtime library

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Pre-Authentication Vulnerability in Mac OS X RPC runtime library MU-200704-01 April 20, 2007 http://labs.musecurity.com/advisories.html Affected Product/Versions: Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac OS X v10.4.9, Mac OS X Server v10.4.9...

USN-451-1: Linux kernel vulnerabilities

The kernel key management code did not correctly handle key reuse. A local attacker could create many key requests, leading to a denial of service. CVE-2007-0006 The kernel NFS code did not correctly validate NFSACL2 ACCESS requests. If a system was serving NFS mounts, a remote attacker could sen...

FreeBSD nfsd NFS Mount Request Denial of Service (CVE-2006-0900)

...

Linux NFS/ACL DoS

Memory corruption on nfsacl verison 2 'ACCESS' request parsing...

Mandrake Linux Security Advisory : kernel (MDKSA-2007:012)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The blockprepatewrite function in the 2.6 kernel before 2.6.13 does not properly clear buffers during certain error conditions, which allows users to read portions of files that have been unlinked CVE-2006-4813. The...

Mandrake Linux Security Advisory : mutt (MDKSA-2006:190)

A race condition in the safeopen function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the OEXCL flag on NFS filesystems. CVE-2006-5297 The muttadvmktemp function in...

SUSE-SA:2006:057: kernel

The remote host is missing the patch for the advisory SUSE-SA:2006:057 kernel. Various security problems were found and fixed in the Linux kernel. We have released updates for following distributions: - SUSE Linux Enterprise Server 9 on September 21st - SUSE Linux Enterprise 10 on September 26th ...

Buffer overflow

Buffer overflow in the EnumPrintersA function in dapcnfsd.dll 0.6.4.0 in Shaffer Solutions SSC DiskAccess NFS Client allows remote attackers to execute arbitrary code via a long argument, an issue similar to CVE-2006-5854 and CVE-2007-0444...

CVE-2007-0641

Buffer overflow in the EnumPrintersA function in dapcnfsd.dll 0.6.4.0 in Shaffer Solutions SSC DiskAccess NFS Client allows remote attackers to execute arbitrary code via a long argument, an issue similar to CVE-2006-5854 and CVE-2007-0444...

CVE-2007-0641

The CVE-2007-0641 entry describes a buffer overflow in EnumPrintersA within dapcnfsd.dll version 0.6.4.0 of Shaffer Solutions’ DiskAccess NFS Client. An attacker can trigger arbitrary code execution by sending a long argument to the RPC interface. This vulnerability is linked to similar issues CV...

Multiple Printer Providers (spooler service) Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ========================================================================= Multiple Printer Providers spooler service Privilege Escalation Exploit ========================================================================= /Private exploit-...

Multiple Printer Providers (Spooler Service) - Local Privilege Escalation

/Private exploit- internal use only Title: Universal exploit for vulnerable printer providers spooler service. Vulnerability: Insecure EnumPrintersW calls Author: Andres Tarasco Acuña - [email protected] Website: http://www.514.es This code should allow to gain SYSTEM privileges with the following...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:151)

A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Prior to and including 2.6.16-rc2, when running on x8664 systems with preemption enabled, local users can cause a DoS oops via multiple ptrace tasks that perform single steps CVE-2006-1066. Prior to 2.6.16, a...

USN-395-1: Linux kernel vulnerabilities

Mark Dowd discovered that the netfilter iptables module did not correcly handle fragmented packets. By sending specially crafted packets, a remote attacker could exploit this to bypass firewall rules. This has only be fixed for Ubuntu 6.10; the corresponding fix for Ubuntu 5.10 and 6.06 will foll...

Important kernel security update

2.6.9-42.0.3.0.2 -rebuilt for EL 2.6.9-42.0.3.0.1 -Fix bonding primary=ethX so it picks correct network IT 101532 ORA 5136660 2.6.9-42.0.3 -fix mprotect to not allow permission subversion Jason Baron 190073 CVE-2006-2071 -fix sysperfmonctl file descriptor reference count issue Anil Keshavamurthy...

Debian DSA-1217-1 : linux-ftpd - programming error

Paul Szabo discovered that the netkit ftp server switches the user id too late, which may lead to the bypass of access restrictions when running on NFS. This update also adds return value checks to setuid calls, which may fail in some PAM configurations. %NASLMINLEVEL 70300 C Tenable Network...

DSA-1217 linux-ftpd

Bulletin has no description...

GLSA-200611-05 : Netkit FTP Server: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-200611-05 Netkit FTP Server: Privilege escalation Paul Szabo reported that an incorrect seteuid call after the chdir function can allow an attacker to access a normally forbidden directory, in some very particular circumstances, f...

FreeBSD Remote NFS RPC Request Denial of Service

This module sends a specially-crafted NFS Mount request causing a kernel panic on host running FreeBSD 6.0. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'FreeBSD Remote NFS RPC Request Denial...

Exploit for Omni-NFS Server stack overflow vulnerability (Metasploit)

No description provided by source. vdxlink.pm The exploit is a part of VulnDisco Pack - use only under the license agreement specified in LICENSE.txt in your VulnDisco distribution VULNDISCO LICENSE Purchaser buys VulnDisco Pack "the Pack" and receives the right to use it under the terms of the...