FreeBSD : ChiTeX/ChiLaTeX unsafe set-user-id root (49ad1bf8-5d7e-11d8-80e3-0020ed76ef5a)

Niels Heinen reports that ChiTeX installs set-user-id root executables that invoked system3 without setting up the environment, trivially allowing local root compromise. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Accellion File Transfer Appliance Multiple Vulnerabilities

R7-0039: Accellion File Transfer Appliance Multiple Vulnerabilities February 7, 2011 -- Vulnerability Details: The Accellion File Transfer Appliance, prior to version FTA80562, suffers from a number of security flaws that can lead to a remote root compromise. 1. Message Routing Daemon Default...

DISA SRR Root Compromise

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Executive Summary - ----------------- Unprivileged local users can obtain root access on Unix systems where the DISA SRR scripts are run. If a remote user can introduce a file into the filesystem e.g. anonymous ftp, http upload, cdrom, samba share,...

FreeBSD : ProFTPD ASCII translation bug resulting in remote root compromise (cf0fb426-3f96-11d8-b096-0020ed76ef5a)

A buffer overflow exists in the ProFTPD code that handles translation of newline characters during ASCII-mode file uploads. An attacker may exploit this buffer overflow by uploading a specially crafted file, resulting in code execution and ultimately a remote root compromise. %NASLMINLEVEL 70300 ...

Gentoo Security Advisory GLSA 200904-18 (udev)

The remote host is missing updates announced in advisory GLSA 200904-18. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 200312-08 (cvs)

The remote host is missing updates announced in advisory GLSA 200312-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Debian Security Advisory DSA 171-1 (fetchmail, fetchmail-ssl)

The remote host is missing an update to fetchmail, fetchmail-ssl announced via advisory DSA 171-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Debian Security Advisory DSA 122-1 (zlib, various)

The remote host is missing an update to zlib, various announced via advisory DSA 122-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian Security Advisory DSA 122-1 (zlib, various)

The remote host is missing an update to zlib, various announced via advisory DSA 122-1. OpenVAS Vulnerability Test $Id: deb1221.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 122-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-189)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-200708-12 : Wireshark: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200708-12 Wireshark: Multiple vulnerabilities Wireshark doesn't properly handle chunked encoding in HTTP responses CVE-2007-3389, iSeries capture files CVE-2007-3390, certain types of DCP ETSI packets CVE-2007-3391, and SSL or MMS...

Sudo: local root compromise with krb5 enabled

The 'sudo' package can be built to use Kerberos 5 for authentication of users. When a user is properly authenticated to sudo, sudo grants that user potentially limited root privileges. Thus a mistake in the authentication code in sudo is potentially severe: it can lead to a local root compromise...

FreeBSD : tnftpd -- Remote root Exploit (e969e6cb-8911-11db-9d01-0016179b2dd5)

The tnftpd port suffer from a remote stack overrun, which can lead to a root compromise. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and contributor...

NetBSD FTPd / tnftpd (NLST) Remote Stack Overflow PoC

No description provided by source. !perl $$$ NetBSD ftpd and ports Remote ROOOOOT $HOLE$ $$$ About tnftpd is a port of the NetBSD FTP server to other systems. It offers many enhancements over the traditional BSD ftpd, including per-class configuration directives via ftpd.conf5, RFC 2389 and...

tnftpd -- Remote root Exploit

The tnftpd port suffer from a remote stack overrun, which can lead to a root compromise...

NetBSD FTPd / tnftpd Remote Stack Overflow PoC

Exploit for bsd platform in category dos / poc ============================================== NetBSD FTPd / tnftpd Remote Stack Overflow PoC ============================================== !perl $$$ NetBSD ftpd and ports Remote ROOOOOT $HOLE$ $$$ About tnftpd is a port of the NetBSD FTP server to...

NetBSD - FTPd Tnftpd Remote Stack Overflow (PoC)

NetBSD - FTPd Tnftpd Remote Stack Overflow PoC !perl $$$ NetBSD ftpd and ports Remote ROOOOOT $HOLE$ $$$ About tnftpd is a port of the NetBSD FTP server to other systems. It offers many enhancements over the traditional BSD ftpd, including per-class configuration directives via ftpd.conf5, RFC 23...

[Full-disclosure] OpenBase SQL multiple vulnerabilities Part Deux

DMA2006-1107a - 'OpenBase SQL multiple vulnerabilities Part Deux' Author: Kevin Finisterre Vendors: http://www.openbase.com Product: 'OpenBase SQL =10.0 ?' References: http://www.digitalmunition.com/DMA2006-1107a.txt Description: regurgitation warning - this may taste VERY familiar For over a...

HP-UX 11i (swpackage) Stack Overflow Local Root Exploit

No description provided by source. / HP-UX swpackage buffer overflow exploit ======================================= HP-UX 'swpackage' contains an exploitable stack overflow in the handling of command line arguements. Specifically the problem occurs due to insufficent bounds checking in the "-S"...

HP-UX 11i - swmodify Local Stack Overflow Local Privilege Escalation

HP-UX 11i - swmodify Local Stack Overflow Local Privilege Escalation / HP-UX swmodify buffer overflow exploit ======================================= HP-UX 'swmodify' contains an exploitable stack overflow in the handling of command line arguements. Specifically the problem occurs due to...