576 matches found
IBM DB2 < 9 Fix Pack 2 Multiple Vulnerabilities
According to its version, the installation of IBM DB2 running on the remote host allows unsafe access to several setuid-root binaries. A local attacker can exploit this to crash the affected database server or possibly even gain root-level access. In addition, the fenced userid may be able to...
MOAB-15-01-2007: Multiple Mac OS X Local Privilege Escalation Vulnerabilities
Summary Multiple binaries inside the /Applications directory tree are setuid root, but remain writable by users in the admin group ex. first user by default in a non-server Mac OS X installation, allowing privilege escalation. A malicious user can overwrite the binaries and perform a disk...
FreeBSD 3.5.1/4.2 ports package local root exploit
No description provided by source. / xklock - FreeBSD 3.5.1 & 4.2 ports package local root exploit The X key lock program contain several exploitable buffer overflows in command line arguments aswell as the 'JNAME' environment variable. xklock is installed setuid root by default. This POC exploit...
IBM AIX rdist工具本地任意文件覆盖漏洞
IBM AIX是一款商业性质的UNIX操作系统。 AIX的/usr/bin/rdist工具实现上存在漏洞，本地攻击者可能利用此漏洞覆盖任意文件并以root用户权限执行任意指令。 IBM AIX 5.3 IBM AIX 5.2 临时解决方法： 删除setuid root位： chmod 555 /usr/bin/rdist 厂商补丁： IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： ftp://aix.software.ibm.com/aix/efixes/security/rdistifix.tar.Z...
HP-UX 11i (swmodify) Stack Overflow Local Root Exploit
No description provided by source. / HP-UX swmodify buffer overflow exploit ======================================= HP-UX 'swmodify' contains an exploitable stack overflow in the handling of command line arguements. Specifically the problem occurs due to insufficent bounds checking in the "-S"...
HP-UX 11i (swpackage) Stack Overflow Local Root Exploit
No description provided by source. / HP-UX swpackage buffer overflow exploit ======================================= HP-UX 'swpackage' contains an exploitable stack overflow in the handling of command line arguements. Specifically the problem occurs due to insufficent bounds checking in the "-S"...
HP-UX 11i - 'swmodify' Local Stack Overflow / Local Privilege Escalation
/ HP-UX swmodify buffer overflow exploit ======================================= HP-UX 'swmodify' contains an exploitable stack overflow in the handling of command line arguements. Specifically the problem occurs due to insufficent bounds checking in the "-S" optional arguement. 'swmodify' is...
HP-UX 11i (swpackage) Stack Overflow Local Root Exploit
Exploit for hp-ux platform in category local exploits ======================================================= HP-UX 11i swpackage Stack Overflow Local Root Exploit ======================================================= / HP-UX swpackage buffer overflow exploit...
HP-UX 11i (swmodify) Stack Overflow Local Root Exploit
Exploit for hp-ux platform in category local exploits ====================================================== HP-UX 11i swmodify Stack Overflow Local Root Exploit ====================================================== / HP-UX swmodify buffer overflow exploit =======================================...
Mandrake Linux Security Advisory : arts (MDKSA-2006:107)
A vulnerability in the artswrapper program, when installed setuid root, could enable a local user to elevate their privileges to that of root. By default, Mandriva Linux does not ship artswrapper setuid root, however if a user or system administrator enables the setuid bit on artswrapper, their...
Ubuntu 4.10 : evolution vulnerability (USN-69-1)
Max Vozeler discovered an integer overflow in camel-lock-helper. An user-supplied length value was not validated, so that a value of -1 caused a buffer allocation of 0 bytes; this buffer was then filled by an arbitrary amount of user-supplied data. A local attacker or a malicious POP3 server coul...
Mandrake Linux Security Advisory : fuse (MDKSA-2005:216)
Thomas Beige found that fusermount failed to securely handle special characters specified in mount points, which could allow a local attacker to corrupt the contents of /etc/mtab by mounting over a maliciously-named directory using fusermount. This could potentially allow the attacker to set...
GLSA-200511-17 : FUSE: mtab corruption through fusermount
The remote host is affected by the vulnerability described in GLSA-200511-17 FUSE: mtab corruption through fusermount Thomas Biege discovered that fusermount fails to securely handle special characters specified in mount points. Impact : A local attacker could corrupt the contents of the /etc/mta...
CVE-2005-3531
fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a directory whose name contains certain special characters...
[Full-disclosure] DMA[2005-1112a] - 'Veritas Storage Foundation VCSI18N_LANG buffer overflow'
DMA2005-1112a - 'Veritas Storage Foundation VCSI18NLANG buffer overflow' Author: Kevin Finisterre Vendor: http://www.Veritas.com Product: 'Veritas Cluster Server for UNIX' References: http://www.digitalmunition.com/DMA2005-1112a.txt http://www.symantec.com/avcenter/security/Content/2005.11.08a.ht...
Operator Shell (osh) 1.7-14 Local Root Exploit
Exploit for linux platform in category local exploits ============================================== Operator Shell osh 1.7-14 Local Root Exploit ============================================== !/bin/sh OSH 1.7-14 Exploit EDUCATIONAL purposes only.... :- by Charles Stevenson core Description: The...
iDEFENSE Security Advisory 08.29.05: Adobe Version Cue VCNative Arbitrary Library Loading Vulnerability
Adobe Version Cue VCNative Arbitrary Library Loading Vulnerability iDEFENSE Security Advisory 08.29.05 www.idefense.com/application/poi/display?id=296&type=vulnerabilities August 29, 2005 I. BACKGROUND Adobe Version Cue is a software version tracking system for Adobe products distributed with Ado...
Adobe Version Cue 1.01.0.1 (OSX) - -lib Local Privilege Escalation
Adobe Version Cue 1.01.0.1 OSX - -lib Local Privilege Escalation / Adobe Version Cue VCNativeOSX: local root exploit. dyld by: vade79/v9 [email protected] fakehalo/realhalo Adobe Version Cue's VCNative program allows un-privileged local users to load arbitrary libraries"bundles" while running setuid...
Adobe Version Cue 1.0/1.0.1 (-lib) Local Root Exploit (OSX)
Exploit for macOS platform in category local exploits =========================================================== Adobe Version Cue 1.0/1.0.1 -lib Local Root Exploit OSX =========================================================== / Adobe Version Cue VCNativeOSX: local root exploit. dyld by:...
Adobe Version Cue 1.0/1.0.1 (OSX) - '-lib' Local Privilege Escalation
/ Adobe Version Cue VCNativeOSX: local root exploit. dyld by: vade79/v9 [email protected] fakehalo/realhalo Adobe Version Cue's VCNative program allows un-privileged local users to load arbitrary libraries"bundles" while running setuid root. this is done via the "-lib" command-line option. note:...