Knox Arkeia 4.0 Backup - Local Overflow

/ source: https://www.securityfocus.com/bid/661/info Knox Software Arkeia 4.0 Backup rnavc & nlserverd HOME Environment Variable Buffer Overflow A local buffer overflow in the handling of the HOME environment variable by the rlserver and rnavc binaries that are part of the Knox Software Arkiea...

freebsd_root_exploit.txt

Subject: FreeBSD and other BSDs? local root explot To: [email protected] -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 / c 1999 babcia padlina ltd. bug in ftsprint function allows to overwrite any file in system, when running /etc/security script executed from 'daily' scripts. affected...

cron_root_patch.txt

Subject: Vixie Cron version 3.0pl1 vulnerable to root exploit To: [email protected] Vixie Cron version 3.0pl1 vulne.ems Content-Type: text/plain; charset=us-ascii PGP Signature Status: unknown Signer: Unknown, Key ID xAE8F7CF5 Signed: 8/28/99 11:42:41 PM Verified: 9/22/99 1:44:11 AM BEGIN...

Martin Schulze Cfingerd 1.4.2 - GECOS Buffer Overflow

Martin Schulze Cfingerd 1.4.2 - GECOS Buffer Overflow // source: https://www.securityfocus.com/bid/651/info Under systems that allow the user to change his GECOS field from the password file and do not limit its length cfingerd is vulnerable to a local root or nobody buffer overflow. By setting a...

VMWare_exploit.txt

Subject: Re: VMWare Advisory.. - exploit To: [email protected] / VMware v1.0.1 root sploit funkySh 02/07/99 1. Redhat 5.2 2.2.9 offset 800-1100 2. offset 1600-2200 1. Slackware 3.6 2.2.9 offset 0 2. offset ? 1 - started from xterm on localhost 2 - started from telnet, with valid display /...

Martin Schulze Cfingerd 1.4.2 - GECOS Buffer Overflow

// source: https://www.securityfocus.com/bid/651/info Under systems that allow the user to change his GECOS field from the password file and do not limit its length cfingerd is vulnerable to a local root or nobody buffer overflow. By setting a carefully designed GECOS field it is possible to...

[SECURITY] New versions of cron fixes possible root exploit

Debian Security Advisory [email protected] http://www.debian.org/security/ Martin Schulze August 30, 1999 Red Hat has recently released a Security Advisory RHSA-1999:030-01 covering a reverse denial of service bug in the vixie cron package. As user you could restart sendmail even if the host...

[SECURITY] New versions of cron fixes possible root exploit

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Martin Schulze August 30, 1999 ---------------------------------------------------------------------------- Red Hat has recently released a...

RedHat Linux 4.25.26.0 S.u.S.E Linux 6.06.1 - Cron Buffer Overflow (2)

RedHat Linux 4.25.26.0 S.u.S.E Linux 6.06.1 - Cron Buffer Overflow 2 // source: https://www.securityfocus.com/bid/602/info The version of Vixie cron that ships with RedHat versions 4.2, 5.2 and 6.0 is vulnerable to a local buffer overflow attack. By utilizing the MAILTO environment variable, a...

imapd4.txt

Date: Fri, 17 Jul 1998 00:06:30 +0200 From: Anonymous Subject: EMERGENCY: new remote root exploit in UW imapd INTRODUCTION On July 10, 1998 a message was posted to the University of Washington Pine mailing lists about a security problem in the UW imapd server released with Pine 4.00, viewable at:...

mscreen-sco.sh

Date: Sat, 26 Sep 1998 12:20:04 +0400 From: Leshka Subject: Root exploit for SCO OpenServer. The following text is in the "koi8-r" character set. Your display is set for the "US-ASCII" character set. Some characters may be displayed incorrectly. !/bin/sh Hi ! This is a buffer overflow exploit for...

clearcase2.txt

Date: Tue, 9 Feb 1999 17:57:27 +0100 From: Oezguer Kesim To: [email protected] Subject: Re: L0pht Advisory - Rational Software ClearCase root exploitable race conditions Holla, things are even worse! You may want to remove the setuid flag from /usr/atria/etc/dbloader, but this won't fix the...

fts.find.du.bsd.txt

Date: Wed, 12 May 1999 14:32:42 +0400 From: Stas Kisel To: [email protected] Subject: fts, du, find Hi. I use FreeBSD-2.2.8 and FreeBSD-2.2.7 and I know that these versions are no longer supported, but: 1. There are many people still using 2.2 2. This bug probably applies to FreeBSD-3.1 and ev...

autofs.linux.txt

Date: Fri, 19 Feb 1999 00:09:29 -0500 From: Brian Jones To: [email protected] Subject: Linux autofs overflow in 2.0.36+ -----BEGIN PGP SIGNED MESSAGE----- Overflow in Autofs - Feb 18 1999 Affected: Linux autofs kernel module in linux-2.0.36 to 2.2.1 Type of Problem: Buffer overflow in kernel...

[SECURITY] New versions of cfingerd fixes root exploit

We have received a report that the all versions of cfingerd prior to 1.4.0 and 1.3.2-18.1 are vulnerable to a root exploit - as posted on bugtraq. We recommend you upgrade your cfingerd package immediately or disable ALLOWEXECUTION. The latter is turned off in the default Debian configuration. wg...

[SECURITY] New versions of cfingerd fixes root exploit

We have received a report that the all versions of cfingerd prior to 1.4.0 and 1.3.2-18.1 are vulnerable to a root exploit - as posted on bugtraq. We recommend you upgrade your cfingerd package immediately or disable ALLOWEXECUTION. The latter is turned off in the default Debian configuration. wg...

Samba 2.0.5 - Local Overflow

Samba 2.0.5 - Local Overflow / source: https://www.securityfocus.com/bid/536/info There were a number of vulnerabilities in the Samba package pre-2.0.5. The first is a possible denial of service in nmbd the netbios name service daemon, which resulted in nmbd spinning until killed. The second...

Solaris 2.52.5.12.67.0 - sadmind Remote Buffer Overflow (2)

Solaris 2.52.5.12.67.0 - sadmind Remote Buffer Overflow 2 // source: https://www.securityfocus.com/bid/866/info Certain versions of Solaris ship with a version of sadmind which is vulnerable to a remotely exploitable buffer overflow attack. sadmind is the daemon used by Solstice AdminSuite...

Solaris 2.5.1 - 'kcms' Local Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/452/info There is an unchecked sprintf call in the versions of /usr/openwin/bin/kcmsconfigure shipped with solaris 2.5, 2.5.1 and 2.6. Unfortunately, kcmsconfigure is installed setuid root, making it possible for an attacker to overflow the buffer and...

[SECURITY] Seyon is vulnerable to a root exploit

Description We have received a report from SGI that a vulnerability has been discovered in the seyon program. This can lead to a root compromise. Any user who can execute the seyon program can exploit this vulnerability. Since SGI does not provide exploit information, we are unable to fix the...