[SECURITY] New verion of dhcp released

Package: dhcp-client-beta dhcp-client Vulnerability type: remote root exploit Debian-specific: no The versions of the ISC DHCP client in debian 2.1 slink and debian 2.2 potato are vulnerable to a root exploit. The OpenBSD team reports that the client inappropriately executes commands embedded in...

WU-FTPD site_exec() Function Remote Format String

The version of WU-FTPD hosted on the remote server does not properly sanitize the argument of the SITE EXEC command. It may be possible for a remote attacker to gain root access. This script was written by Alexis de Bernis Changes by Tenable: - rely on the banner if we could not log in - changed...

[SECURITY] New Debian wu-ftpd packages released

Package: wu-ftpd wu-ftpd-academ Vulnerability: remote root exploit Debian-specific: no The version of wu-ftpd distributed in Debian GNU/Linux 2.1 a.k.a. slink, as well as in the frozen potato and unstable woody distributions, is vulnerable to a remote root compromise. The default configuration in...

[SECURITY] New Debian wu-ftpd packages released

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz June 22, 2000 - ---------------------------------------------------------------------------- Package: wu-ftpd wu-ftpd-academ...

WuFTPD: Providing *remote* root since at least1994

/ - wuftpd2600.c VERY PRIVATE VERSION. DO NOT DISTRIBUTE. 15-10-1999 WUFTPD 2.6.0 REMOTE ROOT EXPLOIT by tf8 NOTE: For ethical reasons, only an exploit for 2.6.0 will be released 2.6.0 is the most popular version nowadays, and it should suffice to proof this vulnerability concept. Site exec was...

Security Advisory: REMOTE ROOT VULNERABILITY IN GSSFTP DAEMON

-----BEGIN PGP SIGNED MESSAGE----- REMOTE ROOT VULNERABILITY IN GSSFTP DAEMON 2000-06-14 SUMMARY: A remote user may execute certain FTP commands without authorization. IMPACT: A remote user may perform denial of service attacks. An attacker with access to a local account may gain unauthorized roo...

Remote root против antisniff

Некорректное преобразование типов данных позволяет обойти проверку на размер строки и переполнить буфер...

Gauntlet Firewall 4.1/4.2/5.0 / Webshield E-ppliance 100.0/300.0 / IRIX 6.5.x - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/1234/info A buffer overflow exists in the version of Mattel's Cyber Patrol software integrated in to Network Associates Gauntlet firewall, versions 4.1, 4.2, 5.0 and 5.5. Due to the manner in which Cyber Patrol was integrated, a vulnerability was...

antisniff x86/linux remote root exploit, including "fixed" 1.02 version

/ l0phtl0phe.c - antisniff exploit 1.02 included -sc/teso gcc -o l0phtl0phe l0phtl0phe.c -Wall -lnet libnet-config --defines description: l0pht messed up the fix for their problem in antisniff by not regarding the type signedness properties of the char and int values used. this results in a cool...

RedHat Linux 6.x - X Font Server Buffer Overflow (Denial of Service)

RedHat Linux 6.x - X Font Server Buffer Overflow Denial of Service // source: https://www.securityfocus.com/bid/1111/info A denial of service exists in the X11 font server shipped with RedHat Linux 6.x. Due to improper input validation, it is possible for any user to crash the X fontserver. This...

CVE-1999-0822

Buffer overflow in Qpopper qpop 3.0 allows remote root access via AUTH command...

CVE-1999-0822

Buffer overflow in Qpopper qpop 3.0 allows remote root access via AUTH command...

ISC BIND 8.2.2 IRIX 6.5.17 Solaris 7.0 - NXT Overflow Denial of Service

ISC BIND 8.2.2 IRIX 6.5.17 Solaris 7.0 - NXT Overflow Denial of Service // source: https://www.securityfocus.com/bid/788/info There are several vulnerabilities in recent BIND packages pre 8.2.2. The first is a buffer overflow condition which is a result of BIND improperly validating NXT records...

ISC BIND 8.2.2 / IRIX 6.5.17 / Solaris 7.0 - NXT Overflow / Denial of Service

// source: https://www.securityfocus.com/bid/788/info There are several vulnerabilities in recent BIND packages pre 8.2.2. The first is a buffer overflow condition which is a result of BIND improperly validating NXT records. The consequence of this being exploited is a remote root compromise...

RFP9905.zeus.remote.root.txt

--- Advisory RFP9905 ------------------------------- rfp.labs ----------- Remote root compromise via Zeus webserver Zeus-search vulnerability --------------------------------- rain forest puppy / [email protected] -- Table of contents: - 1. Scope of problem - 2. Solution - 3. Miscellaneous Updates...

pepsi.txt

-----BEGIN PGP SIGNED HUMOR----- Hash: SHA1 It seems cans of Pepsi and Diet Pepsi have a possible remote root problem on them. While recently eyeing a can of coke while sitting on my terminal I noticed that I could actually drink from it while standing at a distance of at least 3 feet. The sploit...

PT-1999-1427 · Washington University · Wu-Ftpd

Name of the Vulnerable Software and Affected Versions: WU-FTPD affected versions not specified Description: A buffer overflow issue in WU-FTPD and related FTP servers allows remote attackers to gain root privileges. This is achieved by exploiting macro variables in a message file. Recommendations...

CVE-1999-0353

CVE-1999-0353 concerns HP-UX rpc.pcnfsd, where improper handling of the main printer spool directory permissions allowed remote root access. Affected software is HP-UX on the s700/s800 series (11.x) per patch references. The root cause is described in patches noting that rpc.pcnfsd has an error i...

CVE-1999-0353

rpc.pcnfsd in HP gives remote root access by changing the permissions on the main printer spool directory...

proftpd_exploit.txt

Subject: ProFTPD To: [email protected] / !!!! Private .. ... distribute !!!! proftpd-1.2.0 remote root exploit beta2 Still need some code, but it works fine Offset: Linux Redhat 6.0 0 - proftpd-1.2.0pre1 0 - proftpd-1.2.0pre2 0 - proftpd-1.2.0pre3 If this dont work, try changing the align...