2132 matches found
Linux Kernel < 2.4.20 - Module Loader Privilege Escalation
/ Linux Kernel Module Loader Local R00t Exploit Up to 2.4.20 By anonymous KuRaK include include include include include include include include include include include include include define TMPSIZE 4096 define FMAX 768 define UIDNUM 6 define MMSIZE 40961 define MAXSTACK 0xc0000000 // where to pu...
Symbolic links in xfsdump
File is created insecurely in the root of given file system...
Trend Micro Virus Control System 1.8 - Information Disclosure
Trend Micro Virus Control System 1.8 - Information Disclosure source: https://www.securityfocus.com/bid/6618/info An information disclosure vulnerability has been reported for TVCS. Reportedly, it is possible for an attacker to access the log files generated by TVCS. The log files contain very...
Cisco PIX Multiple Vulnerabilities
...
EZ Systems HTTPBench 1.1 - Information Disclosure
source: https://www.securityfocus.com/bid/6153/info An information disclosure vulnerability has been reported for httpbench. Reportedly, httpbench may disclose the contents of web server readable files to remote attackers. Information obtained in this manner may be used to launch further,...
FreeBSD-SA-02:37.kqueue
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:37.kqueue Security Advisory The FreeBSD Project Topic: local users can panic the system using the kqueue mechanism Category: core Module: kqueue Announced: 2002-08-05...
CVE-2002-0354
The XMLHttpRequest object XMLHTTP in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to read arbitrary files and list directories on a client system by opening a URL that redirects the browser to the file on the client, then reading the result using the responseText property...
OpenBSD 2.9/3.0 - Default Crontab Root Command Injection
/ source: https://www.securityfocus.com/bid/4495/info OpenBSD ships with a number of cron jobs configured by default. The tasks are for the purpose of summarizing system information. The mail1 utility is used to send the summaries to the root user. This utility supports escaped characters in...
Переполнение буфера в telnet сервере Microsoft (buffer overflow)
No description provided...
Несанкционированный доступ в slashcode (unauthorized access)
Зная логин и пароль одного пользователя можно получить права другого, включая администратора...
[RHSA-2001:110-05] Insecure setserial initscript
--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Insecure setserial initscript Advisory ID: RHSA-2001:110-05 Issue date: 2001-09-12 Updated on: 2001-09-19 Product: Red Hat Linux Keywords: setserial initscript temporary file...
AVTronics InetServer DoS and BoF Vulnerabilities
Strumpf Noir Society Advisories ! Public release ! -- -= AVTronics InetServer DoS and BoF Vulnerabilities =- Release date: Wednesday, August 22, 2001 Introduction: AVTronics InetServer is a freeware product suite for MS Windows, bundling such services as SMTP, POP3, Daytime and Telnet in 1 produc...
Security Advisory FreeBSD-SA-01:40.fts [REVISED]
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:40 Security Advisory FreeBSD, Inc. Topic: fts3 routines contain race condition REVISED Category: core Module: libc Announced: 2001-06-04 Revised: 2001-08-16 Credits: Nick...
Advisory CA-2001-24
-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2001-24 Vulnerability in OpenView and NetView Original release date: August 15, 2001 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Systems running HP OpenView Network Node...
Apple Open Firmware 4.1.7/4.1.8 - Insecure Password
source: https://www.securityfocus.com/bid/3186/info A user who has set an Open Firmware password on their Apple system believes it to be safe when powered down. There is a tool that any user with access to the Finder can run in order to reveal the Open Firmware password without any decryption...
Snapstream PVS vulnerability
Interrorem security announcement Interrorem - protecting business Software vulnerable: Snapstream PVS Vendor website: http://www.snapstream.com Workaround: Stop the snapstream server Software synopsis: Snapstream PVS is a Personal Video System for Windows Systems. It allows users to schedule...
KDE KTVision 0.1 - File Overwrite
KDE KTVision 0.1 - File Overwrite source: https://www.securityfocus.com/bid/2913/info KTVision works with frame-grabber cards and KDE Unix K Desktop Environment to support TV video display on the PC screen. KTVision is vulnerable to symbolic link attacks. It is possible for an attacker to...
Security Advisory FreeBSD-SA-01:30.ufs-ext2fs
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:30 Security Advisory FreeBSD, Inc. Topic: UFS/EXT2FS allows disclosure of deleted data Category: kernel Module: ufs/ext2fs Announced: 2001-03-22 Credits: Sven Berkvens...
buffer overflow in sudo fixed
Sudo 1.6.3p6 is now available for Slackware 7.1 and Slackware -current. This release fixes a known buffer overflow, which could be used by malicious users to compromise parts of the system. If you rely on Sudo and use one of the above versions of Slackware, it is recommended that you upgrade to t...
SSH 1.2.30 - Daemon Logging Failure
SSH 1.2.30 - Daemon Logging Failure source: https://www.securityfocus.com/bid/2345/info SSH1 is the implementation of the Secure Shell communication protocol by SSH Communications. SSH1 is version 1 of the protocol specified by IETF draft to protect the integrity of traffic over the network. A...