Low: Red Hat Security Advisory: perl security update

Updated Perl packages that fix security issues and contain several bug fixes are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. Perl is a high-level programming language commonly used for system...

security flaw

The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service segmentation fault via certain crafted requests...

CVE-2005-2796

The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service segmentation fault via certain crafted requests...

CVE-2005-2796

The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service segmentation fault via certain crafted requests...

CVE-2005-2796

The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service segmentation fault via certain crafted requests...

DEBIAN-CVE-2005-2796

The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service segmentation fault via certain crafted requests...

CVE-2005-2796

CVE-2005-2796 affects Squid up to version 2.5.STABLE10 and earlier, with the sslConnectTimeout path in ssl.c being exploitable. The vulnerability allows remote attackers to trigger a denial of service (segmentation fault) by sending certain crafted requests. OpenVAS entries and advisories confirm...

Squid: Denial of Service vulnerabilities

Background Squid is a full-featured Web proxy cache designed to run on Unix-like systems. It supports proxying and caching of HTTP, FTP, and other protocols, as well as SSL support, cache hierarchies, transparent caching, access control lists and many more features. Description Certain malformed...

Operator Shell (osh) 1.7-13 - Local Privilege Escalation

Operator Shell osh 1.7-13 - Local Privilege Escalation You must be groupoperator for permissions /str0ke !/usr/bin/perl OSH 1.7 Exploit 2 Gonna bang away at this until it's removed ;- EDUCATIONAL purposes only.... :- by Charles Stevenson core Description: The Operator Shell Osh is a setuid root,...

georgiQmail.txt

Georgi Guninski security advisory 74, 2005 64 bit qmail fun Systems affected: qmail on 64 bit platforms with a lot of virtual memory 8GB Date: 6 May 2005 Legal Notice: This Advisory is Copyright c 2004 Georgi Guninski. You may not modify it and distribute it or distribute parts of it without the...

Fedora Core 3 : perl-5.8.5-14.FC3 (2005-600)

Paul Szabo discovered another vulnerability in the File::Path::rmtree function of perl, the popular scripting language. When a process is deleting a directory tree, a different user could exploit a race condition to create setuid binaries in this directory tree, provided that he already had write...

squid -- Denial Of Service Vulnerability in sslConnectTimeout

The squid patches page notes: After certain slightly odd requests Squid crashes with a segmentation fault in sslConnectTimeout...

CVE-2004-2217

The CVE affects yhttpd in the yChat product, prior to version 0.7, due to multiple unknown vulnerabilities that can cause a denial of service (segmentation fault) by unknown vectors. The public documents do not specify the exact root cause or vulnerable subcomponents, nor any confirmed exploits o...

CVE-2002-2018

sastcpd in SAS/Base 8.0 might allow local users to gain privileges by setting the netencralg environment variable, which causes a segmentation fault...

CVE-2002-2018

CVE-2002-2018 affects SAS/Base 8.0. The affected component is sastcpd; a local user can set the NETENCRALG environment variable, which causes a segmentation fault and may grant privileges. Exploit details and remediation/patch information are not provided in the connected documents.

FreeBSD : zip -- long path buffer overflow (40549bbf-43b5-11d9-a9e7-0001020eed82)

A HexView security advisory reports : When zip performs recursive folder compression, it does not check for the length of resulting path. If the path is too long, a buffer overflow occurs leading to stack corruption and segmentation fault. It is possible to exploit this vulnerability by embedding...

Re: [Full-disclosure] Solaris 9/10 ld.so fun

Przemyslaw Frasunek wrote: ld.so from Solaris 9 and 10 doesn't check LDAUDIT environment variable when running sugid binaries, allowing to run arbitrary code with elevated privileges. Well, I can't belive, that such trivial vulnerability exists in modern OS... ... Oh, well, it's not the end of fu...

Solaris 10 /usr/sbin/traceroute vulnerabilities

/usr/sbin/traceroute from Solaris 10 is vulnerable to buffer overflow in handling -g argument. After supplying 10 -g parameters, return address is overwritten by IP address argument: atari:root:/home/venglin /usr/sbin/traceroute -g 1 -g 2 -g 3 -g 4 -g 5 -g 6 -g 7 -g 8 -g 9 -g 10 127.0.0.1...

traceSolaris.txt

/usr/sbin/traceroute from Solaris 10 is vulnerable to buffer overflow in handling -g argument. After supplying 10 -g parameters, return address is overwritten by IP address argument: atari:root:/home/venglin /usr/sbin/traceroute -g 1 -g 2 -g 3 -g 4 -g 5 -g 6 -g 7 -g 8 -g 9 -g 10 127.0.0.1...

eXtropia Shopping Cart web_store.cgi Remote Exploit

No description provided by source. !/usr/bin/perl -w Remote Command Execution Vulnerability In Webstore.cgi SegmentationFault Group Greetz to : Xsupr3mo - failed - Status-x - Stealh - P3S4D3L0 Greetz to : berhooz - nima - ehsan - Unknown OutLaw eutanasia www.ashiyane.com ok setp by setp to work :...