894 matches found
wvtfpd remote root heap overflow
Subject: WVTFTPD heap overflow, remote root exploit ++++++++++++++++++++++++++++++++++++++++++++ Product: WVTFTPD ... the world's fastest TFTP server. http://open.nit.ca/wiki/index.php?page=WvTftp Not used much yet b/c it's rather new, but other software by this company seems to be in circulation...
Monit <= 4.2 Basic Authentication Remote Root Exploit
No description provided by source. / THE EYE ON SECURITY RESEARCH GROUP - INDIA http://www.eos-india.net/poc/305monit.c Remote Root Exploit for Monit = 4.2 Vulnerability: Buffer overflow in handling of Basic Authentication informations. Server authenticates clients through: Authentication: Basic...
Debian DSA-087-1 : wu-ftpd - remote root exploit
CORE ST reports that an exploit has been found for a bug in the wu-ftpd glob code this is the code that handles filename wildcard expansion. Any logged in user including anonymous FTP users can exploit the bug to gain root privileges on the server. %NASLMINLEVEL 70300 C Tenable Network Security,...
Debian DSA-089-2 : icecast-server - remote root exploit (and others)
The icecast-server a streaming music server package as distributed in Debian GNU/Linux 2.2 has several security problems : - if a client added a / after the filename of a file to be downloaded the server would crash - by escaping dots as %2E it was possible to circumvent security measures and...
Debian DSA-049-1 : cfingerd
Megyer Laszlo report on Bugtraq that the cfingerd daemon as distributed with Debian GNU/Linux 2.2 was not careful in its logging code. By combining this with an off-by-one error in the code that copied the username from an ident response cfingerd could be exploited by a remote user. Since cfinger...
Debian DSA-357-1 : wu-ftpd - remote root exploit
iSEC Security Research reports that wu-ftpd contains an off-by-one bug in the fbrealpath function which could be exploited by a logged-in user local or anonymous to gain root privileges. A demonstration exploit is reportedly available. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
Debian DSA-045-2 : ntpd - remote root exploit
Przemyslaw Frasunek reported that ntp daemons such as that released with Debian GNU/Linux are vulnerable to a buffer overflow that can lead to a remote root exploit. A previous advisory DSA-045-1 partially addressed this issue, but introduced a potential denial of service attack. This has been...
Debian DSA-122-1 : zlib - malloc error (double free)
The compression library zlib has a flaw in which it attempts to free memory more than once under certain conditions. This can possibly be exploited to run arbitrary code in a program that includes zlib. If a network application running as root is linked to zlib, this could potentially lead to a...
[Full-Disclosure] Debian netkit telnetd vulnerability
Exposure: Remote root compromise through buffer handling flaws Confirmed vulnerable: Up-to-date Debian 3.0 woody issue is Debian-specific Debian netkit-telnet-ssl-0.17.24+0.1 package Debian netkit-telnet-ssl-0.17.17+0.1 package Mitigating factors: Telnet service must be running and accessible to...
NetBSD Security Advisory 2004-009: ftpd root escalation
-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2004-009 ================================= Topic: ftpd root escalation Version: NetBSD-current: source prior to Aug 10, 2004 NetBSD 2.0 branch: source prior to Aug 15, 2004 NetBSD 1.6.2: affected NetBSD 1.6.1: affected NetBSD 1.6: affect...
OpenSSH < 3.2.1 AFS/Kerberos Ticket/Token Passing Overflow
Binary data 1989.prm...
Apple Mac OS X <= 10.3.3 AppleFileServer Remote Root Overflow
Exploit for macOS platform in category remote exploits ============================================================= Apple Mac OS X = 10.3.3 AppleFileServer Remote Root Overflow ============================================================= !/usr/bin/perl Priv8security com remote root exploit for...
Dropbear SSH <= 0.34 Remote Root Exploit
Exploit for linux platform in category remote exploits ======================================== Dropbear SSH quit Connection closed. % objdump -R /usr/local/sbin/dropbear| grep malloc 080673bc R386JUMPSLOT malloc % drop-root -v24 localhost ?.2022u%email protected's password: Connection closed by...
Mandrake Linux Security Advisory : samba (MDKSA-2003:044)
An exploitable buffer overflow was discovered in the Samba server that can lead to an anonymous remote root compromise. The Samba Team also discovered some potential overflows during an internal code audit which was done in response to the previously noted buffer overflow problem. All versions of...
Mandrake Linux Security Advisory : apcupsd (MDKSA-2003:018)
A remote root vulnerability in slave setups and some buffer overflows in the network information server code were discovered by the apcupsd developers. They have been fixed in the latest unstable version, 3.10.5 which contains additional enhancements like USB support, and the latest stable versio...
[security bulletin] SSRT4782 rev. 0 HP-UX CIFS Server potential remote root access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01062 REVISION: 0 SSRT4782 rev. 0 HP-UX CIFS Server potential remote root access ----------------------------------------------------------------- NOTICE: There are no restrictions for distribution of this Bulletin provided...
eSeSIX.txt
eSeSIX Thintune thin client multiple vulnerabilities IT-Consult, 2004-07-24 Background - -------- Thintune is a series of thin client appliances sold by eSeSIX GmbH, Germany. They offer ICA, RDP, X11 and SSH support based on a customized Linux platform. See http://www.thintune.com for details...
SUSE-SA:2002:040: lprng, html2ps
The remote host is missing the patch for the advisory SUSE-SA:2002:040 lprng, html2ps. The lprng package contains the 'runlpr' program which allows the lp user to execute the lpr program as root. Local attackers can pass certain commandline arguments to lpr running as root, fooling it to execute...
SUSE-SA:2003:032: wuftpd
The remote host is missing the patch for the advisory SUSE-SA:2003:032 wuftpd. Janusz Niewiadomski and Wojciech Purczynski of iSEC Security Research have found a single byte buffer overflow in the Washington University ftp daemon wuftpd, a widely used ftp server for Linux-like systems. It is yet...
@stake advisory: WebSTAR (5.3.2 and below) Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: WebSTAR 5.3.2 Multiple Vulnerabilities Release Date: 07/13/2004 Application: WebSTAR 5.3.2 and below Platform: MacOS X 10.3.3 and below Severity: A remote attacker can obtain root privilege...