FreeBSD 'kqueue'存在一个未明NULL指针引用漏洞

Bugraq ID: 36375 FreeBSD是一款开放源代码的操作系统。 FreeBSD包含的kqueue存在一个未明NULL指针引用漏洞，本地攻击者可以利用漏洞获得root特权，目前没有详细漏洞细节提供。 FreeBSD FreeBSD 6.0 .x FreeBSD FreeBSD 6.0 -STABLE FreeBSD FreeBSD 6.0 -RELEASE FreeBSD FreeBSD 6.4-RELEASE-p5 FreeBSD FreeBSD 6.4-RELEASE-p4 FreeBSD FreeBSD 6.4-RELEASE-p2 FreeBSD FreeBSD 6....

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : shadow vulnerability (USN-695-1)

Paul Szabo discovered a race condition in login. While setting up tty permissions, login did not correctly handle symlinks. If a local attacker were able to gain control of the system utmp file, they could cause login to change the ownership and permissions on arbitrary files, leading to a root...

Debian: Security Advisory (DSA-1709-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DSA-1709-1 shadow - privilege escalation

Bulletin has no description...

Linux/x86 - setuid(0) + Break chroot (../ 10x Loop) Shellcode (34 bytes)

Linux/x86 - setuid0 + Break chroot ../ 10x Loop Shellcode 34 bytes. Shellcode exploit for Linuxx86 platform / The setuid0+chroot shellcode. It is the one of the smallest shellcodes in the !!world!! it will put '../' 10 times Size 34 bytes OS Linux /rootteam/dev0id rootteam.void.ru...

FreeBSD -- netgraph / bluetooth privilege escalation

Problem Description: Some function pointers for netgraph and bluetooth sockets are not properly initialized. Impact: A local user can cause the FreeBSD kernel to execute arbitrary code. This could be used by an attacker directly; or it could be used to gain root privilege or to escape from a jail...

CUPS < 1.3.8-4 - Local Privilege Escalation

/ cve-2008-5377.c CUPS http://jon.oberheide.org Usage: $ gcc cve-2008-5377.c -o cve-2008-5377.c $ ./cve-2008-5377 $ id uid=0root gid=1000vm ... Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-5377 pstopdf in CUPS 1.3.8 allows local users to overwrite arbitrary files via a...

USN-695-1: shadow vulnerability

Paul Szabo discovered a race condition in login. While setting up tty permissions, login did not correctly handle symlinks. If a local attacker were able to gain control of the system utmp file, they could cause login to change the ownership and permissions on arbitrary files, leading to a root...

Disable Firewall

Added: 11/25/2008 Background This tool attempts to disable the firewall on the target. Limitations A connection to the target is required to run this tool. The connection requires root privileges on Unix and Linux targets. Platforms Windows / Linux / Unix...

smcFanControl 2.1.2 Multiple Buffer Overflow Vulnerabilities PoC (OSX)

No description provided by source. vnsecurity.net ADVISORY 2008-11 =============================== :Title: Buffer overflows in smcFanControl 2.1.2 for OSX :Severity: Critical :Reporter: KaiJern, Lau kjlau at vnsecurity.net :Products: smcFanControl 2.1.2 :OS: OSX :Fixed in: to be release...

smcFanControl 2.1.2 Multiple Buffer Overflow Vulnerabilities PoC (OSX)

Exploit for macOS platform in category dos / poc ====================================================================== smcFanControl 2.1.2 Multiple Buffer Overflow Vulnerabilities PoC OSX ====================================================================== vnsecurity.net ADVISORY 2008-11...

GLSA-200804-30 : KDE start_kdeinit: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200804-30 KDE startkdeinit: Multiple vulnerabilities Vulnerabilities have been reported in the processing of user-controlled data by startkdeinit, which is setuid root by default. Impact : A local attacker could possibly execute...

horde316-inclusion.txt

Horde 3.1.6 arbitrary file inclusion vulnerability, proof of concept & patch. A severe security vulnerability affects any unix distribution running version 3.1.6 of the Horde webmail client included in most popular webhosting control panels. All previous versions are also affected and it is...

CVE-2008-0928

Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges to access arbitrary memory and escape the virtual machine...

iDefense Security Advisory 02.07.08: IBM DB2 Universal Database db2pd Arbitrary Library Loading Vulnerability

iDefense Security Advisory 02.07.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 07, 2008 I. BACKGROUND IBM Corp.'s DB2 Universal Database product is a large database server product commonly used for high end databases. For more information, visit the following URL...

Debian Security Advisory DSA 092-1 (wmtv)

The remote host is missing an update to wmtv announced via advisory DSA 092-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 087-1 (wu-ftpd)

The remote host is missing an update to wu-ftpd announced via advisory DSA 087-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-6049

Unspecified vulnerability in the SSL LOAD GSKIT action in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors, involving a call to dlopen when the effective uid is root...

openSUSE 10 Security Update : samba (samba-3350)

Specially crafted MS-RPC packets could overwrite heap memory and therfore could potentially be exploited to execute code CVE-2007-2446. Authenticated users could leverage specially crafted MS-RPC packets to pass arguments unfiltered to /bin/sh CVE-2007-2447. A bug in the local SID/Name translatio...

CentOS 5 : kernel (CESA-2007:0936)

Updated kernel packages that fix a security issue in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. A flaw was foun...