1514 matches found
CVE-2008-2540
Apple Safari on Mac OS X, and before 3.1.2 on Windows, does not prompt the user before downloading an object that has an unrecognized content type, which allows remote attackers to place malware into the 1 Desktop directory on Windows or 2 Downloads directory on Mac OS X, and subsequently allows...
Windows XP core driver secdrv.sys a local elevation of privilege vulnerability-vulnerability warning-the black bar safety net
Windows XP core driver secdrv.sys a local elevation of privilege vulnerability Author: Polymorphours Email: [email protected] Homepage:http://www.whitecell.org Date: 2007-10-23 This kernel provide the right 0day found a period of days, is said to have recently been Symantec the Pick and...
CVE-2004-2733
Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to 1 block arbitrary IP addresses via popupipblocking.asp or 2 modify topics via popuptopicadmin.asp...
CVE-2006-3443
CVE-2006-3443 affects Windows 2000 SP4 with Winlogon vulnerable to a User Profile Elevation of Privilege when SafeDllSearchMode is disabled. A local attacker can place a malicious DLL in the UserProfile directory to execute code with SYSTEM-level privileges after logon, as described in Microsoft ...
HP-UX PHCO_34539 : HP-UX Running Software Distributor Local Elevation of Privilege (HPSBUX02114 SSRT061115 rev.1)
s700800 11.11 Software Distributor Cumulative Patch : Potential security vulnerabilities have been identified with HP-UX running Software Distributor. These vulnerabilities could be exploited by a local authorized user to gain elevated privileges. %NASLMINLEVEL 70300 C Tenable Network Security,...
CVE-2006-0096
wan/sdla.c in Linux kernel 2.6.x before 2.6.11 and 2.4.x before 2.4.29 does not require the CAPSYSRAWIO privilege for an SDLA firmware upgrade, with unknown impact and local attack vectors. NOTE: further investigation suggests that this issue requires root privileges to exploit, since it is...
MS Windows Plug-and-Play Service Remote Universal Exploit (french fix)
No description provided by source. / HOD-ms05039-pnp-expl-french.c 25.Aug.2005 Very slightly modified version by Fabrice MOURRON [email protected] Tested on Win2k SP4 Frencg Original credits & comments follow. / / HOD-ms05039-pnp-expl.c: 2005-08-10: PUBLIC v.0.2 Copyright c 2005 houseofdabus...
MS Windows Plug-and-Play Service Remote Universal Expl (MS05-039)
Exploit for unknown platform in category remote exploits ==================================================================== MS Windows Plug-and-Play Service Remote Universal Exploit MS05-039 ==================================================================== / HOD-ms05039-pnp-expl.c: 2005-08-1...
Debian DSA-557-1 : rp-pppoe - missing privilege dropping
Max Vozeler discovered a vulnerability in pppoe, the PPP over Ethernet driver from Roaring Penguin. When the program is running setuid root which is not the case in a default Debian installation, an attacker could overwrite any file on the file system. %NASLMINLEVEL 70300 C Tenable Network...
Critical: Red Hat Security Advisory: : : : Updated sendmail packages fix vulnerabilities
Updated Sendmail packages are available for Red Hat Linux on IBM iSeries and pSeries systems to fix a vulnerability that allows local and possibly remote attackers to gain root privileges as well as a vulnerability that may allow remote attackers to gain root privileges by sending a carefully...
Security Update: [CSSA-2002-SCO.27] UnixWare 7.1.1 Open UNIX 8.0.0 : ppptalk root privilege vulnerability
To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: UnixWare 7.1.1 Open UNIX 8.0.0 : ppptalk root privilege vulnerability Advisory number: CSSA-2002-SCO.27 Issue date: 2002 June 18 Cross reference: 1. Problem...
CVE-2001-0528
The CVE-2001-0528 entry affects Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x, where a debug version of FNDPUB11I.DLL logs the APPS schema password in cleartext to a debug file. This enables local users to obtain the password and gain privileges. The availa...
FreeBSD-SA-97:04.procfs
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-97:04 Security Advisory FreeBSD, Inc. Topic: security compromise via procfs Category: core Module: procfs Announced: 1997-08-19 Affects: FreeBSD 2.1., FreeBSD 2.2.,...
