FreeBSD 2.2-4.2 / NetBSD 1.2-4.5 / OpenBSD 2.x - FTPd 'glob()' Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/2548/info The BSD ftp daemon and derivatives such as IRIX ftpd or the ftp daemon shipped with Kerberos 5 contain a number of buffer overflows that may lead to a compromise of root access to malicious users. During parsing operations, the ftp daemon...

Удаленный root через ntpd (buffer overflow)

Классическое переполнение буфера...

Sun Solaris DMI to SNMP mapper daemon snmpXdmid contains buffer overflow

Overview There is a buffer overflow in the snmpXdmi daemon, which may allow intruders to gain root privileges on systems running the vulnerable daemon. Description The SNMP-to-DMI mapper daemon snmpXdmi translates Simple Network Management Protocol SNMP events to Desktop Management Interface DMI...

FreeBSD Ports Security Advisory FreeBSD-SA-01:27.cfengine

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:27 Security Advisory FreeBSD, Inc. Topic: cfengine port contains remote root vulnerability Category: ports Module: cfengine Announced: 2001-03-12 Credits: Pekka Savola...

Серьезные дырки в cfengine

Многочисленные ошибки форматной строки позволяют получить root удаленно...

BIND 8.2.x (TSIG) Remote Root Stack Overflow Exploit (4)

Exploit for linux platform in category remote exploits ======================================================== BIND 8.2.x TSIG Remote Root Stack Overflow Exploit 4 ======================================================== / This exploit has been fixed and extensive explanation and clarification...

BIND 8.2.x (TSIG) Remote Root Stack Overflow Exploit (2)

Exploit for linux platform in category remote exploits ======================================================== BIND 8.2.x TSIG Remote Root Stack Overflow Exploit 2 ======================================================== / copyright LAST STAGE OF DELIRIUM feb 2001 poland ://lsd-pl.net/ / / bind...

Серьезные дырки в KTH Kerberos IV

Пользователь может указать krb4proxy для перенаправления запроса на авторизацию собственному прокси-серверу. В сочетании с переполнением буфера это дает возможность удаленного root-доступа. Локальный пользователь может указать собственные конфигурационные файлы, которые будут использованы для...

CVE-2001-0013

Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges...

FreeBSD-SA-01:20.mars_nwe

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:20 Security Advisory FreeBSD, Inc. Topic: marsnwe contains potential remote root compromise Category: ports Module: marsnwe Announced: 2001-02-07 Credits: Przemyslaw...

Дырка в XMail (CTRLSvr)

Переполнение буфера в компоненте удаленного администрирования remote root...

WU-FTPD 2.4.22.52.6 - Debug Mode Client Hostname Format String

WU-FTPD 2.4.22.52.6 - Debug Mode Client Hostname Format String source: https://www.securityfocus.com/bid/2296/info Wu-ftpd is a widely used unix ftp server. It contains a format string vulnerability that may be exploitable under certain perhaps 'extreme' circumstances. When running in debug mode,...

[!H] Tcpdump 3.5.2 remote root vulnerability

!Hispahack Research Team ------------------------ Program: Tcpdump 3.5 3.4, 3.6. and the CVS version are not vulnerable Platform: nix, Windoze Risk: Remote root access Author: Zhodiac [email protected] Date: 4/1/2001 - Problem: ----------- Tcpdump is a network packet analizer, capabel to decod...

LPRng 3.6.24-1 Remote Root Exploit

Exploit for linux platform in category remote exploits ================================== LPRng 3.6.24-1 Remote Root Exploit ================================== / REMOTE ROOT EXPLOIT for linux x86 - LPRng-3.6.24-1 RedHat 7.0 The RedHat 7.0 replaced the BSD lpr with the LPRng package which is...

LPRng (RedHat 7.0) - lpd Format String

LPRng RedHat 7.0 - lpd Format String / Copyright c 2000 - Security.is The following material may be freely redistributed, provided that the code or the disclaimer have not been partly removed, altered or modified in any way. The material is the property of security.is. You are allowed to adopt th...

KTH Kerberos 4 - Arbitrary Proxy Usage

KTH Kerberos 4 - Arbitrary Proxy Usage source: https://www.securityfocus.com/bid/2090/info Kerberos is a widely used network service authentication system. The version of Kerberos developed and maintained by KTH Swedish Royal Institute of Technology contains a vulnerability that may allow/assist ...

KTH Kerberos 4 - Arbitrary Proxy Usage

source: https://www.securityfocus.com/bid/2090/info Kerberos is a widely used network service authentication system. The version of Kerberos developed and maintained by KTH Swedish Royal Institute of Technology contains a vulnerability that may allow/assist in a local or remote root compromise. K...

BFTPd - 'vsprintf()' Format Strings

/ Copyright c 2000 - Security.is The following material may be freely redistributed, provided that the code or the disclaimer have not been partly removed, altered or modified in any way. The material is the property of security.is. You are allowed to adopt the represented code in your programs,...

irix.telnetd.txt

We've found a very severe vulnerability in the IRIX telnetd service that upon successful exploitation can give remote root access to any IRIX 6.2-6.5.8m,f system. The bug discussed here appeared in IRIX 5.2-6.1 systems and was the result of SGI efforts to patch a security vulnerability reported b...

[SECURITY] New version of libpam-smb released

Package: libpam-smb Vulnerability: remote root exploit Debian-specific: no libpam-smb contains a buffer overflow that can be used to execute arbitrary commands with root privilege. libpam-smb was not shipped with Debian 2.1 slink, but was included in Debian 2.2 potato. A fixed version of libpam-s...