210 matches found
CVE-2014-3158
Integer overflow in the getword function in options.c in pppd in Paul's PPP Package ppp before 2.4.7 allows attackers to "access privileged options" via a long word in an options file, which triggers a heap-based buffer overflow that "corrupts security-relevant variables."...
Integer overflow
Integer overflow in the getword function in options.c in pppd in Paul's PPP Package ppp before 2.4.7 allows attackers to "access privileged options" via a long word in an options file, which triggers a heap-based buffer overflow that "corrupts security-relevant variables."...
CVE-2014-3158
Integer overflow in the getword function in options.c in pppd in Paul's PPP Package ppp before 2.4.7 allows attackers to "access privileged options" via a long word in an options file, which triggers a heap-based buffer overflow that "corrupts security-relevant variables."...
CVE-2014-3158
An entry for CVE-2014-3158 concerns pppd (Paul's PPP Package, ppp) before 2.4.7. The root cause is an integer overflow in getword (options.c) that triggers a heap-based buffer overflow, potentially corrupting security-relevant variables. This allows attackers to access privileged options via a lo...
CVE-2014-3158
Integer overflow in the getword function in options.c in pppd in Paul's PPP Package ppp before 2.4.7 allows attackers to "access privileged options" via a long word in an options file, which triggers a heap-based buffer overflow that "corrupts security-relevant variables."...
CVE-2014-3158
Integer overflow in the getword function in options.c in pppd in Paul's PPP Package ppp before 2.4.7 allows attackers to "access privileged options" via a long word in an options file, which triggers a heap-based buffer overflow that "corrupts security-relevant variables."...
CVE-2014-3158
Integer overflow in the getword function in options.c in pppd in Paul's PPP Package ppp before 2.4.7 allows attackers to "access privileged options" via a long word in an options file, which triggers a heap-based buffer overflow that "corrupts security-relevant variables."...
[SECURITY] Fedora 20 Update: kppp-4.14.1-1.fc20
Dialer and Front end for pppd...
PT-2014-1917
Name of the Vulnerable Software and Affected Versions ppp versions prior to 2.4.7 Description The issue is related to an integer overflow in the getword function in options.c in pppd, which can trigger a heap-based buffer overflow. This overflow can corrupt security-relevant variables, potentiall...
Mac OS X <= 10.4.8 pppd Plugin Loading Privilege Escalation Exploit
No description provided by source. Mac OS X = 10.4.8 pppd Plugin Loading Privilege Escalation Exploit http://www.exploit-db.com/sploits/05252007-osxpppd.tar milw0rm.com 2007-05-25...
FreeBSD 4.x,NetBSD 1.4.x/1.5.x/1.6,OpenBSD 3 pppd Arbitrary File Permission Modification Race Condition
No description provided by source. source: http://www.securityfocus.com/bid/5355/info A vulnerability has been reported in some versions of the pppd daemon included with multiple BSD distributions. A race condition error in the code may result in the pppd process changing the file permissions on ...
Mandriva Update for ppp MDVA-2008:087 (ppp)
Check for the Version of ppp OpenVAS Vulnerability Test Mandriva Update for ppp MDVA-2008:087 ppp Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
PPPD Winbind插件本地权限提升漏洞
BUGTRAQ ID: 18849 CVECAN ID: CVE-2006-2194 ppp（Paul's PPP Package）是一个开放源码的软件包，用于在Linux和Solaris系统上实现点对点协议。 ppp对插件执行权限的控制上存在漏洞，本地攻击者可能利用此漏洞提升自己的权限。 pppd的winbind插件没有检查setuid调用的结果。在对用户进程数配置了PAM限制且启用了winbind插件的系统上，本地攻击者可以利用这个漏洞以root权限执行winbind NTLM认证帮助程序，可能导致权限提升。 Ubuntu Linux 6.06 LTS powerpc Ubuntu...
Ubuntu 5.10 / 6.06 LTS : ppp vulnerability (USN-310-1)
Marcus Meissner discovered that the winbind plugin of pppd does not check the result of the setuid call. On systems that configure PAM limits for the maximum number of user processes and enable the winbind plugin, a local attacker could exploit this to execute the winbind NTLM authentication help...
Mac OS X <= 10.4.8 pppd Plugin Loading Privilege Escalation Exploit
No description provided by source. Mac OS X = 10.4.8 pppd Plugin Loading Privilege Escalation Exploit http://www.milw0rm.com/sploits/05252007-osxpppd.tar sebug.net...
Mac OS X <= 10.4.8 pppd Plugin Loading Privilege Escalation Exploit
Exploit for macOS platform in category local exploits =================================================================== Mac OS X = 10.4.8 pppd Plugin Loading Privilege Escalation Exploit =================================================================== back: http://inj3ct0r.com/sploits/469.ra...
Apple Mac OSX 10.4.8 - pppd Plugin Loading Privilege Escalation
Mac OS X = 10.4.8 pppd Plugin Loading Privilege Escalation Exploit https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/3985.tar 05252007-osxpppd.tar milw0rm.com 2007-05-25...
Apple Mac OSX 10.4.8 - pppd Plugin Loading Privilege Escalation
Apple Mac OSX 10.4.8 - pppd Plugin Loading Privilege Escalation Mac OS X = 10.4.8 pppd Plugin Loading Privilege Escalation Exploit https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/3985.tar 05252007-osxpppd.tar milw0rm.com 2007-05-25...
Apple Mac OS X pppd privilege escalation
It's possible to attach user-supplied module to privileged process with 'plugin' command...
iDefense Security Advisory 05.24.07: Apple Computer Mac OS X pppd Plugin Loading Privilege Escalation Vulnerability
Apple Computer Mac OS X pppd Plugin Loading Privilege Escalation Vulnerability iDefense Security Advisory 05.24.07 http://labs.idefense.com/intelligence/vulnerabilities/ May 24, 2007 I. BACKGROUND Apple Mac OS X pppd is a setuid root application that is used to establish and configure connections...