364 matches found
FreeBSD 7.0-RELEASE - Telnet Daemon Privilege Escalation
FreeBSD 7.0-RELEASE - Telnet Daemon Privilege Escalation FreeBSD 7.0-RELEASE telnet daemon local privilege escalation - And possible remote root code excution. There is a rather big bug in the current FreeBSD telnetd daemon. The environment is not properly sanitized when execution /bin/login, wha...
Applications can open up remote root access on G1 Phone
Hi, Google Android applications on the T-Mobile G1 can spawn a telnetd that gives remote root access to your phone: http://www.android-unleashed.com/2008/11/howto-get-root-on-your-android-g1-and.html This particular method needs user interaction, but a rogue Android app could easily run telnetd...
Webmin and Usermin authentication bypass vulnerability
Overview Webmin and Usermin, web-based system management tools for UNIX, contain a vulnerability which may allow a remote attacker to bypass authentication when PAM authentication is used. Impact A remote attacker could bypass Webmin and Usermin's authentication, and execute an arbitrary command...
Debian Security Advisory DSA 178-1 (heimdal)
The remote host is missing an update to heimdal announced via advisory DSA 178-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2006-6904
Unspecified vulnerability in the Broadcom Bluetooth stack allows remote attackers to gain administrative access aka Remote Root via unspecified vectors...
Samba 2.2.8 Remote Root Exploit - sambal.c
No description provided by source. / Remote root exploit for Samba 2.2.x and prior that works against Linux all distributions, FreeBSD 4.x, 5.x, NetBSD 1.x and OpenBSD 2.x, 3.x and 3.2 non-executable stack. sambal.c is able to identify samba boxes. It will send a netbios name packet to port 137. ...
[Full-disclosure] Confixx Index.PHP SQL Injection Vulnerability (Exploit - not new vuln)
Here is more information on the confixx vuln released by LoK Crew. Sorry for the poor quality of this posting, I was short of time. Product: ^^^^^^^ Confixx is a comprehensive control panel that provides the best value, proven quality, fully developed feature set and quality support. The software...
[Full-disclosure] iDEFENSE Security Advisory 10.20.05: Multiple Vendor Ethereal srvloc Buffer Overflow Vulnerability
Multiple Vendor Ethereal srvloc Buffer Overflow Vulnerability iDEFENSE Security Advisory 10.20.05 www.idefense.com/application/poi/display?id=323&type=vulnerabilities October 20, 2005 I. BACKGROUND Ethereal is a full featured open source network protocol analyzer. For more information, see...
Ethereal 0.10.10 - SIP Protocol Dissector Remote Buffer Overflow
Ethereal 0.10.10 - SIP Protocol Dissector Remote Buffer Overflow / tetherealsip.c now quite functional Ethereal 0.10.0 to 0.10.10 SIP Dissector remote root exploit Advisory: http://www.ethereal.com/appnotes/enpa-sa-00019.html produced by Team W00dp3ck3r: frauk\x41iser mag00n s00n thorben Notes:...
Ethereal <= 0.10.10 (SIP) Protocol Dissector Remote BoF Exploit
Exploit for linux platform in category remote exploits =============================================================== Ethereal include include include include include unsigned char sipheader = "\x4f\x50\x54\x49\x4f\x4e\x53\x20\x73\x69\x70\x3a\x68\x61\x63"...
mtftpd 0.0.3 - Remote Code Execution
mtftpd 0.0.3 - Remote Code Execution / \ mtftpd include include include include include include include include include include define PORT 21 define doit b0, b1, b2, b3, addr \ b0 = a...
Citadel/UX <= 6.27 Remote Root Format String Exploit
Exploit for linux platform in category remote exploits ==================================================== Citadel/UX options options: -h host or IP -t type of target system -l targets list -g syslog GOT address -r RET address email protected:/audit$ ./citadelfsexp -h localhost -t0 Citadel/UX...
Debian DSA-049-1 : cfingerd
Megyer Laszlo report on Bugtraq that the cfingerd daemon as distributed with Debian GNU/Linux 2.2 was not careful in its logging code. By combining this with an off-by-one error in the code that copied the username from an ident response cfingerd could be exploited by a remote user. Since cfinger...
NetBSD Security Advisory 2004-009: ftpd root escalation
-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2004-009 ================================= Topic: ftpd root escalation Version: NetBSD-current: source prior to Aug 10, 2004 NetBSD 2.0 branch: source prior to Aug 15, 2004 NetBSD 1.6.2: affected NetBSD 1.6.1: affected NetBSD 1.6: affect...
Dropbear SSH <= 0.34 Remote Root Exploit
Exploit for linux platform in category remote exploits ======================================== Dropbear SSH quit Connection closed. % objdump -R /usr/local/sbin/dropbear| grep malloc 080673bc R386JUMPSLOT malloc % drop-root -v24 localhost ?.2022u%email protected's password: Connection closed by...
Mandrake Linux Security Advisory : samba (MDKSA-2003:044)
An exploitable buffer overflow was discovered in the Samba server that can lead to an anonymous remote root compromise. The Samba Team also discovered some potential overflows during an internal code audit which was done in response to the previously noted buffer overflow problem. All versions of...
[security bulletin] SSRT4782 rev. 0 HP-UX CIFS Server potential remote root access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01062 REVISION: 0 SSRT4782 rev. 0 HP-UX CIFS Server potential remote root access ----------------------------------------------------------------- NOTICE: There are no restrictions for distribution of this Bulletin provided...
@stake advisory: WebSTAR (5.3.2 and below) Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: WebSTAR 5.3.2 Multiple Vulnerabilities Release Date: 07/13/2004 Application: WebSTAR 5.3.2 and below Platform: MacOS X 10.3.3 and below Severity: A remote attacker can obtain root privilege...
FreeBSD : ProFTPD ASCII translation bug resulting in remote root compromise (156)
The following package needs to be updated: proftpd %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgcf0fb4263f9611d8b0960020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...
SUSE Security Announcement: Live CD 9.1 (SuSE-SA:2004:011)
-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: Live CD 9.1 Announcement-ID: SuSE-SA:2004:011 Date: Thursday, May 6th 2004 22:30 MEST Affected products: SUSE LINUX 9.1 Personal Edition Live CD Vulnerability Type: remote root access Severity 1-10: 8 SuSE default package: yes...