Debian DSA-139-1 : super - format string vulnerability

GOBBLES found an insecure use of format strings in the super package. The included program super is intended to provide access to certain system users for particular users and programs, similar to the program sudo. Exploiting this format string vulnerability a local user can gain unauthorized roo...

Super Guestbook superguestconfig Admin Password Disclosure

Binary data 1564.prm...

DEBIAN-CVE-2004-0579

Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root...

CVE-2004-0579

Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root...

Cisco Transaction Language 1 (TL1) interface fails to properly validate accounts with blank passwords

Overview There is a vulnerability in the Cisco Transaction Language 1 TL1 login interface that could allow a remote attacker to gain access to a Cisco ONS device. Description Transaction Language 1 TL1 is a widely used telecommunications management protocol. A default account, CISCO15, contains a...

SuSE-SA:2003:049: Linux Kernel

The remote host is missing the patch for the advisory SuSE-SA:2003:049 Linux Kernel. This security update fixes a serious vulnerability in the Linux kernel. A missing bounds check in the brk system call allowed processes to request memory beyond the maximum size allowed for tasks, causing kernel...

FreeBSD : SA-04:13.linux

The remote host is running a version of the FreeBSD kernel which contains a programming error in the way it handles some Linux system calls, which may be exploited by an attacker to gain super-user privileges on the remote host, or to crash it. C Tenable Network Security, Inc. if !...

CVE-2004-0579

Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root...

CVE-2004-0579

Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root...

CVE-2004-0579

The CVE-2004-0579 entry concerns the Debian-related format-string vulnerability in the program named “super.” Public documentation in the connected sources confirms that this flaw exists in versions prior to 3.23 and allows a local user to execute arbitrary code with root privileges due to a faul...

CVE-2004-0579: Undefined Security Weakness

Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root...

Format string bug in super

Format string bug on syslog call...

[Full-Disclosure] [SECURITY] [DSA 522-1] New super packages fix format string vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 522-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 19th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 522-1] New super packages fix format string vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 522-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 19th, 2004 http://www.debian.org/security/faq -...

DSA-522 super - format string vulnerability

Bulletin has no description...

[Full-Disclosure] iDEFENSE Security Advisory 06.16.03: Linux-PAM getlogin() Spoofing Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 06.16.03: http://www.idefense.com/advisory/06.16.03.txt Linux-PAM getlogin Spoofing Vulnerability June 16, 2003 I. BACKGROUND The Pluggable Authentication Module PAM is a flexible mechanism for authenticating users. More...

Super-M Son hServer URI Traversal Arbitrary File Access

Super-M Son hServer is vulnerable to a directory traversal. It enables a remote attacker to view any file on the computer with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid11678; scriptversion"1.22";...

Super Guestbook superguestconfig Admin Password Disclosure

The remote server is running Super GuestBook, a set of php scripts to manage an interactive guestbook. An attacker may retrieve the file /superguestconfig, which contains the password of the guestbook administrator as well as other configuration details. %NASLMINLEVEL 70300 C Tenable Network...

Disclosing information in Super GuestBook

Product: Super GuestBook Version: 1.0 OffSite: http://www.lasource.r2.ru/ Problem: Disclosing information ----------------------------------------- View file http://target/cgi-bin/SGBDIR/superguestconfig and you view configuration of the Super guestbook. View "Password" field and you view passwor...

CVE-2002-0817

CVE-2002-0817 describes a format-string vulnerability in the Debian/Linux package named “super.” The flaw allows a local user to gain root privileges by supplying a long command-line argument, due to insecure format-string handling in the affected component. Public references in the connected doc...