CVE-2003-1366

CVE-2003-1366 affects OpenBSD versions 2.0–3.2 in the chpass utility, enabling local users to read portions of arbitrary files via a hard link attack on a temporary file used to store user database information. The vulnerability is described with a CVSS v2 base score of 3.3 (LOCAL, MEDIUM complex...

CVE-2003-1366

chpass in OpenBSD 2.0 through 3.2 allows local users to read portions of arbitrary files via a hard link attack on a temporary file used to store user database information...

[SECURITY] Fedora Core 6 Update: openssh-4.3p2-25.fc6

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

CORE-2007-0928: Stack-based buffer overflow vulnerability in OpenBSD’s DHCP server

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies – CoreLabs Advisory http://www.coresecurity.com/corelabs Stack-based buffer overflow vulnerability in OpenBSD’s DHCP server Advisory Information Title: Stack-based buffer overflow vulnerability in OpenBSD’s DHCP server...

OpenBSD DHCPD服务程序远程栈溢出漏洞

BUGTRAQ ID: 25984 OpenBSD是一款开放源代码Unix类操作系统。 OpenBSD系统的DHCP协议实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 OpenBSD的options.c文件中的consoptions函数没有正确地处理DHCP请求。如果远程攻击者所发送的DHCP请求中指定最大消息大小小于最小IP MTU（278）的话，就会在OpenBSD中导致dhcpd8覆盖栈缓冲区，执行任意指令。 OpenBSD OpenBSD 4.2 OpenBSD OpenBSD 4.1 OpenBSD OpenBSD 4.0...

CVE-2007-5365

Stack-based buffer overflow in the consoptions function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a DHCP request specifying a maximum...

CVE-2007-5365

Stack-based buffer overflow in the consoptions function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a DHCP request specifying a maximum...

Stack overflow

Stack-based buffer overflow in the consoptions function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a DHCP request specifying a maximum...

CVE-2007-5365

Stack-based buffer overflow in the consoptions function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a DHCP request specifying a maximum...

CVE-2007-5365

CVE-2007-5365 : OpenBSD 4.0–4.2 dhcpd and similar ISC dhcp-2 based implementations suffer a stack-based buffer overflow in cons_options (options.c) that can allow remote attackers to execute code or cause daemon crashes by sending a DHCP request with a max message size smaller than the minimum IP...

OpenBSD 4.1 - bgplg cmd Cross-Site Scripting

OpenBSD 4.1 - bgplg cmd Cross-Site Scripting source: https://www.securityfocus.com/bid/27535/info OpenBSD bgplg is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

OpenBSD 4.1 - bgplg 'cmd' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27535/info OpenBSD bgplg is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user i...

Tor security advisory: cross-protocol http form attack

http://archives.seul.org/or/announce/Sep-2007/msg00000.html "... a malicious website or Tor exit node can give the Tor user a page that includes a POST element directed to Tor's control port localhost:9051... This particular attack worked because Tor's control protocol gave an error message on...

Race condition

Multiple race conditions in the 1 Sudo monitor mode and 2 Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing...

CVE-2007-4305

Multiple race conditions in the 1 Sudo monitor mode and 2 Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing...

CVE-2007-4305

Multiple race conditions in the 1 Sudo monitor mode and 2 Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing...

CVE-2007-4305

CVE-2007-4305 involves multiple race conditions in the Sudo monitor mode and in Sysjail policies of Systrace on NetBSD and OpenBSD. The underlying issue allows local users to defeat system call interposition, thereby bypassing access control policy and auditing. Affected components: NetBSD/OpenBS...

File多个拒绝服务漏洞

CVE ID:CVE-2007-2026 CVE-2007-2799 CNCVE ID:CNCVE-20072026 CNCVE-20072799 File是一款nix下的文件格式识别工具。 File处理恶意文件错误，本地攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 CVE-2007-2026是对特定的规则表达式处理存在问题，可导致应用程序崩溃。 CVE-2007-2799是存在整数下溢问题，可导致任意代码执行。 目前没有详细漏洞细节提供。 Ubuntu Ubuntu Linux 7.04 sparc Ubuntu Ubuntu Linux 7.04 powerpc Ubuntu...

bsd/x86 setuid/portbind shellcode 94 bytes

Exploit for bsd/x86 platform in category shellcode ========================================== bsd/x86 setuid/portbind shellcode 94 bytes ========================================== / $Id: portbind-bsd.c,v 1.3 2004/06/02 12:22:30 raptor Exp $ portbind-bsd.c - setuid/portbind shellcode for BSD/x86...

bsd/x86 setuid/execve shellcode 30 bytes

Exploit for bsd/x86 platform in category shellcode ======================================== bsd/x86 setuid/execve shellcode 30 bytes ======================================== / $Id: setuid-bsd.c,v 1.6 2004/06/02 12:22:30 raptor Exp $ setuid-bsd.c - setuid/execve shellcode for BSD/x86 Copyright c...