1441 matches found
Mandrake Linux Security Advisory : cups (MDKSA-2005:008)
A buffer overflow was discovered in the ParseCommand function in the hpgltops utility. An attacker with the ability to send malicious HPGL files to a printer could possibly execute arbitrary code as the 'lp' user CVE-2004-1267. Vulnerabilities in the lppasswd utility were also discovered. The...
RHEL 3 : cups (RHSA-2005:013)
Updated CUPS packages that fix several security issues are now available. The Common UNIX Printing System provides a portable printing layer for UNIXR operating systems. A buffer overflow was found in the CUPS pdftops filter, which uses code from the Xpdf package. An attacker who has the ability ...
security flaw
lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors...
security flaw
lppasswd in CUPS 1.1.22, when run in environments that do not ensure that file descriptors 0, 1, and 2 are open when lppasswd is called, does not verify that the passwd.new file is different from STDERR, which allows local users to control output to passwd.new via certain user input that triggers...
DEBIAN-CVE-2004-1269
lppasswd in CUPS 1.1.22 does not remove the passwd.new file if it encounters a file-size resource limit while writing to passwd.new, which causes subsequent invocations of lppasswd to fail...
DEBIAN-CVE-2004-1268
lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors...
CVE-2004-2395
Memory leak in passwd 0.68 allows local users to cause a denial of service memory consumption via a large number of failed read attempts from the password buffer...
CVE-2004-2394
Off-by-one error in passwd 0.68 and earlier, when using the --stdin option, causes passwd to use the first 78 characters of a password instead of the first 79, which results in a small reduction of the search space required for brute force attacks...
Solaris 8/9 passwd circ() Local Root Exploit
Exploit for solaris platform in category local exploits ============================================ Solaris 8/9 passwd circ Local Root Exploit ============================================ / $Id: raptorpasswd.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorpasswd.c - passwd circ local, Solaris/SPA...
Solaris 8/9 passwd - 'circ()' Local Privilege Escalation
/ $Id: raptorpasswd.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorpasswd.c - passwd circ local, Solaris/SPARC 8/9 Copyright c 2004 Marco Ivaldi Unknown vulnerability in passwd1 in Solaris 8.0 and 9.0 allows local users to gain privileges via unknown attack vectors CAN-2004-0360. "Those of you...
CVE-2004-1268
lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors...
linux/x86 add user t00r ENCRYPT 116 bytes
No description provided by source. / !!!!!! ANTI IDS SHELLCODE !!!!!! [email protected] 0x14abril0x7d2 !!!!! ENCRIPTADA !!!!! 116 bytes Agrega la linea "t00r::0:0::/:/bin/sh" en /etc/passwd !!!!! ENCRIPTADA !!!!! Para mas informacion Descargue...
linux/x86 add user t00r 82 bytes
No description provided by source. / [email protected] 0x14abril0x7d2 82 bytes Agrega la linea "t00r::0:0::/:/bin/sh" en /etc/passwd Encriptada en http://www.shellcode.com.ar/linux/lnx-t00r-cr1.c / include stdio.h // Shellcode // Asm Code char shellcode= "\x31\xc0" // xorl %eax,%eax "\x50...
linux/x86 add user t00r 82 bytes
Exploit for linux/x86 platform in category shellcode ================================ linux/x86 add user t00r 82 bytes ================================ / email protected 0x14abril0x7d2 82 bytes Agrega la linea "t00r::0:0::/:/bin/sh" en /etc/passwd Encriptada en...
linux/x86 add user 104 bytes
linux/x86 add user 104 bytes. Shellcode exploit for linx86 platform / Source to this is pass.s This will append a root line to the passwd file see the source. Shok Matt Conover, [email protected] / char shellcode= "\xeb\x03\x5f\xeb\x05\xe8\xf8\xff\xff\xff\x31\xdb\xb3\x35\x01\xfb"...
linux/x86 add user 104 bytes
Exploit for linux/x86 platform in category shellcode ============================ linux/x86 add user 104 bytes ============================ / Source to this is pass.s This will append a root line to the passwd file see the source. Shok Matt Conover, email protected / char shellcode=...
linux/x86 add user t00r 82 bytes
linux/x86 add user t00r 82 bytes. Shellcode exploit for linx86 platform / [email protected] 0x14abril0x7d2 82 bytes Agrega la linea "t00r::0:0::/:/bin/sh" en /etc/passwd Encriptada en http://www.shellcode.com.ar/linux/lnx-t00r-cr1.c / include // Shellcode // Asm Code char shellcode=...
CVE-2002-0357
Unknown vulnerability in rpc.passwd in the nfs.sw.nis subsystem of SGI IRIX 6.5.15 and earlier allows local users to gain root privileges...