CVE-2006-6904

Unspecified vulnerability in the Broadcom Bluetooth stack allows remote attackers to gain administrative access aka Remote Root via unspecified vectors...

Samba 2.2.8 Remote Root Exploit - sambal.c

No description provided by source. / Remote root exploit for Samba 2.2.x and prior that works against Linux all distributions, FreeBSD 4.x, 5.x, NetBSD 1.x and OpenBSD 2.x, 3.x and 3.2 non-executable stack. sambal.c is able to identify samba boxes. It will send a netbios name packet to port 137. ...

[Full-disclosure] Confixx Index.PHP SQL Injection Vulnerability (Exploit - not new vuln)

Here is more information on the confixx vuln released by LoK Crew. Sorry for the poor quality of this posting, I was short of time. Product: ^^^^^^^ Confixx is a comprehensive control panel that provides the best value, proven quality, fully developed feature set and quality support. The software...

[Full-disclosure] iDEFENSE Security Advisory 10.20.05: Multiple Vendor Ethereal srvloc Buffer Overflow Vulnerability

Multiple Vendor Ethereal srvloc Buffer Overflow Vulnerability iDEFENSE Security Advisory 10.20.05 www.idefense.com/application/poi/display?id=323&type=vulnerabilities October 20, 2005 I. BACKGROUND Ethereal is a full featured open source network protocol analyzer. For more information, see...

Ethereal 0.10.10 - SIP Protocol Dissector Remote Buffer Overflow

Ethereal 0.10.10 - SIP Protocol Dissector Remote Buffer Overflow / tetherealsip.c now quite functional Ethereal 0.10.0 to 0.10.10 SIP Dissector remote root exploit Advisory: http://www.ethereal.com/appnotes/enpa-sa-00019.html produced by Team W00dp3ck3r: frauk\x41iser mag00n s00n thorben Notes:...

Ethereal <= 0.10.10 (SIP) Protocol Dissector Remote BoF Exploit

Exploit for linux platform in category remote exploits =============================================================== Ethereal include include include include include unsigned char sipheader = "\x4f\x50\x54\x49\x4f\x4e\x53\x20\x73\x69\x70\x3a\x68\x61\x63"...

mtftpd 0.0.3 - Remote Code Execution

mtftpd 0.0.3 - Remote Code Execution / \ mtftpd include include include include include include include include include include define PORT 21 define doit b0, b1, b2, b3, addr \ b0 = a...

Citadel/UX <= 6.27 Remote Root Format String Exploit

Exploit for linux platform in category remote exploits ==================================================== Citadel/UX options options: -h host or IP -t type of target system -l targets list -g syslog GOT address -r RET address email protected:/audit$ ./citadelfsexp -h localhost -t0 Citadel/UX...

Debian DSA-049-1 : cfingerd

Megyer Laszlo report on Bugtraq that the cfingerd daemon as distributed with Debian GNU/Linux 2.2 was not careful in its logging code. By combining this with an off-by-one error in the code that copied the username from an ident response cfingerd could be exploited by a remote user. Since cfinger...

NetBSD Security Advisory 2004-009: ftpd root escalation

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2004-009 ================================= Topic: ftpd root escalation Version: NetBSD-current: source prior to Aug 10, 2004 NetBSD 2.0 branch: source prior to Aug 15, 2004 NetBSD 1.6.2: affected NetBSD 1.6.1: affected NetBSD 1.6: affect...

Dropbear SSH <= 0.34 Remote Root Exploit

Exploit for linux platform in category remote exploits ======================================== Dropbear SSH quit Connection closed. % objdump -R /usr/local/sbin/dropbear| grep malloc 080673bc R386JUMPSLOT malloc % drop-root -v24 localhost ?.2022u%email protected's password: Connection closed by...

Mandrake Linux Security Advisory : samba (MDKSA-2003:044)

An exploitable buffer overflow was discovered in the Samba server that can lead to an anonymous remote root compromise. The Samba Team also discovered some potential overflows during an internal code audit which was done in response to the previously noted buffer overflow problem. All versions of...

[security bulletin] SSRT4782 rev. 0 HP-UX CIFS Server potential remote root access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01062 REVISION: 0 SSRT4782 rev. 0 HP-UX CIFS Server potential remote root access ----------------------------------------------------------------- NOTICE: There are no restrictions for distribution of this Bulletin provided...

@stake advisory: WebSTAR &#40;5.3.2 and below&#41; Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: WebSTAR 5.3.2 Multiple Vulnerabilities Release Date: 07/13/2004 Application: WebSTAR 5.3.2 and below Platform: MacOS X 10.3.3 and below Severity: A remote attacker can obtain root privilege...

FreeBSD : ProFTPD ASCII translation bug resulting in remote root compromise (156)

The following package needs to be updated: proftpd %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgcf0fb4263f9611d8b0960020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

SUSE Security Announcement: Live CD 9.1 &#40;SuSE-SA:2004:011&#41;

-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: Live CD 9.1 Announcement-ID: SuSE-SA:2004:011 Date: Thursday, May 6th 2004 22:30 MEST Affected products: SUSE LINUX 9.1 Personal Edition Live CD Vulnerability Type: remote root access Severity 1-10: 8 SuSE default package: yes...

Remote Format String Vulnerabilities in eXtremail

Package: eXtremail Auth: http://www.extremail.com/ Versions: 1.5.9 current release Vulnerability: Format String What’s eXtremail: eXtremail is a Unix mail server that supports SMTP/POP3/IMAP protocols. It includes support for virtual domains, spoofing attack ,SSL connection and Antivirus checking...

MS Windows IIS 5.0 SSL Remote buffer overflow Exploit (MS04-011)

Exploit for unknown platform in category remote exploits ================================================================ MS Windows IIS 5.0 SSL Remote buffer overflow Exploit MS04-011 ================================================================ // / THCIISSLame 0.3 - IIS 5 SSL remote root...

Ethereal 0.10.0 0.10.2 - IGAP Overflow

Ethereal 0.10.0 0.10.2 - IGAP Overflow / THE EYE ON SECURITY RESEARCH GROUP - INDIA Ethereal IGAP Dissector Message Overflow Remote Root exploit Copyright 2004 - EOS-India Group Authors note: Shellcode splitting technique: Due to difficulty involved while following normal exploitation techniques...

Lam3rZ Security Advisory #2/2004: LSF eauth vulnerability leads to a possibility of controlling cluster jobs on behalf of other users

Lam3rZ Security Advisory 2/2004 23 Feb 2004 Remote within a cluster root in LSF Name: Load Sharing Facility versions 4.x, 5.x, 6.x Severity: High Vendor URL: http://www.platform.com Author: Tomasz Grabowski [email protected] Vendor notified: 29 Oct 2003 Vendor confirmed: 30 Oct 2003 Vendor...