[SECURITY] New version of libpam-smb released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Michael Stone September 11, 2000 - ------------------------------------------------------------------------ Package: libpam-smb Vulnerability:...

vpn-root.txt

Date: 8-14-00 Time: 12:40p PST / You have been infected by the Bubonic Loki / OVERVIEW --------- RapidStream has hard-coded the 'rsadmin' account into the sshd binary in the appliance OS. The account has been given a 'null' password in which password assignment and authentication was expected to ...

FreeBSD-SA-00:40.mopd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:40 Security Advisory FreeBSD, Inc. Topic: mopd port allows remote root compromise Category: ports Module: mopd Announced: 2000-08-28 Credits: Matt Power , OpenBSD Affects...

[LSD] IRIX telnetd remote vulnerability

We've found a very severe vulnerability in the IRIX telnetd service that upon successful exploitation can give remote root access to any IRIX 6.2-6.5.8m,f system. The bug discussed here appeared in IRIX 5.2-6.1 systems and was the result of SGI efforts to patch a security vulnerability reported b...

rapidstream.vpn.txt

Date: 8-14-00 Time: 12:40p PST OVERVIEW RapidStream has hard-coded the 'rsadmin' account into the sshd binary in the appliance OS. The account has been given a 'null' password in which password assignment and authentication was expected to be handled by the RapidStream software itself. The vendor...

everythingform.txt

Content-Type: Remote Root via vulnerible CGI software Date : 13/08/2000 Sender : s1gnal9 Subject : everythingform.cgi Vulnerible CGI X-System : UNIX/NT systems running the everythingform.cgi CGI software X-Status : s1gnal9-ADVISORY-everythingform.txt X-Greets : Narr0w, f0bic, VetesGirl PRODUCT...

FreeBSD-SA-00:35.proftpd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:35 Security Advisory FreeBSD, Inc. Topic: proftpd port contains remote root compromise Category: ports Module: proftpd Announced: 2000-08-14 Credits: lamagra Affects:...

Exploit for Totalbill...

Totalbill is a complete billing and provisioning system for ISPs, and it's written by Aptis Software www.aptissoftware.com. There is one part of it that sits on your mail and radius servers called Sysgen that listens on a port sometimes 9998, but it usually varies, and it allows the incoming...

Redhat Linux 6.x remote root exploit

Hi, Included below is an exploit for the recently exposed linux rpc.statd format string vulnerability0. I have tailored it towards current Redhat Linux 6.x installations. It can easily be incorporated into attacks against the other vulnerable Linux distributions. I am not a security expert, but...

Redhat Linux 6.x remote root exploit

Hi, Included below is an exploit for the recently exposed linux rpc.statd format string vulnerability0. I have tailored it towards current Redhat Linux 6.x installations. It can easily be incorporated into attacks against the other vulnerable Linux distributions. I am not a security expert, but...

Redhat Linux 6.x remote root exploit

Hi, Included below is an exploit for the recently exposed linux rpc.statd format string vulnerability0. I have tailored it towards current Redhat Linux 6.x installations. It can easily be incorporated into attacks against the other vulnerable Linux distributions. I am not a security expert, but...

[SECURITY] New verion of dhcp released (updated)

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Michael Stone July 28, 2000 - ------------------------------------------------------------------------ Package: dhcp-client-beta dhcp-client...

Lots and lots of fun with rpc.statd

Last week was a little quiet, so I thought I'd throw some kindling on the fire. Here's another prime example of a format string bug: our old friend rpc.statd. Attached is an exploit. The offsets are for Linux/PowerPC, Debian 2.2. It isn't functional, though - and it's more than just kiddy-proofed...

[SECURITY] New Debian nfs-common packages released

Package: nfs-common from nfs-utils Vulnerability: remote root exploit Debian-specific: no The version of nfs-common distributed in Debian GNU/Linux 2.2 a.k.a potato, as well as in the unstable woody distribution, is vulnerable to a remote root compromise. No exploit is known to exist in the wild,...

[SECURITY] New Debian nfs-common packages released

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz July 15, 2000 - ---------------------------------------------------------------------------- Package: nfs-common from...

FreeBSD-SA-00:33.kerberosIV

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:33 Security Advisory FreeBSD, Inc. Topic: kerberosIV distribution contains multiple vulnerabilities under FreeBSD 3.x Category: core Module: kerberosIV Announced:...

Удаленный root через ftpd в OpenBSD

Ошибка "форматной строки" полностью аналогичная ошибке в wu-ftpd...

Удаленный root в proftpd

Дырка похожая на аналогичную в WU, связана с использованием ввода пользователя в качестве форматной строки...

FreeBSD-SA-00:30.openssh

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:30 Security Advisory FreeBSD, Inc. Topic: OpenSSH UseLogin directive permits remote root access Category: core Module: openssh Announced: 2000-07-05 Credits: Markus Fried...

FreeBSD-SA-00:29.wu-ftpd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:29 Security Advisory FreeBSD, Inc. Topic: wu-ftpd port contains remote root compromise REVISED Category: ports Module: wu-ftpd Announced: 2000-07-05 Revised: 2000-07-11...