Microsoft Excel Opcode Handling Unspecified Remote Code Execution Vulnerability

Description Microsoft Excel is reportedly prone to an unspecified remote code-execution vulnerability. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of targeted users. Note that Microsoft Office applications include functionality to embed Office file...

[Reversemode advisory] Computer Associates HIPS Drivers - multiple local privilege escalation vulnerabilities.

Computer Associates "Host Intrusion Prevention System" Engine Drivers are prone to multiple local privilege escalation vulnerabilities. Unprivileged users can take advantage of these flaws in order to execute arbitrary code with kernel privileges. Two drivers are affected, kmxstart.sys and...

OpenSSH privilege separation flaw

Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification that authentication has been successful, which might allow attackers to bypass authentication. NOTE: as of 20061108, it is believed that this issue is only exploitable by leveraging...

Apple Mac OSX 10.x - FPathConf System Call Local Denial of Service

// source: https://www.securityfocus.com/bid/20982/info Apple Mac OS X is prone to a local denial-of-service vulnerability because the kernel fails to properly handle the execution of a system call. Exploiting this issue allows local, unprivileged users to crash affected kernels, denying further...

CVE-2006-5794

Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification that authentication has been successful, which might allow attackers to bypass authentication. NOTE: as of 20061108, it is believed that this issue is only exploitable by leveraging...

FreeBSD 5.5/6.x - Scheduler Policy Local Denial of Service

// source: https://www.securityfocus.com/bid/20517/info FreeBSD is prone to a local denial-of-service vulnerability because the kernel fails to require superuser privileges to perform a sensitive operation. An attacker may leverage this issue to consume all CPU resources, denying service to...

psraptor.txt

!/bin/sh $Id: raptorucbps,v 1.1 2006/07/26 12:15:42 raptor Exp $ raptorucbps - information leak with Solaris /usr/ucb/ps Copyright c 2006 Marco Ivaldi A security vulnerability in the "/usr/ucb/ps" see ps1B command may allow unprivileged local users the ability to see environment variables and the...

SSH Tectia Manager privilege escalation

User can start unprivileged 'sshd', after "Restart" GUI button is pressed application is restarted with root privileges...

Solaris 8/9 - '/usr/ucb/ps' Local Information Leak

!/bin/sh $Id: raptorucbps,v 1.1 2006/07/26 12:15:42 raptor Exp $ raptorucbps - information leak with Solaris /usr/ucb/ps Copyright c 2006 Marco Ivaldi A security vulnerability in the "/usr/ucb/ps" see ps1B command may allow unprivileged local users the ability to see environment variables and the...

Solaris 8 / 9 (/usr/ucb/ps) Local Information Leak Exploit

Exploit for solaris platform in category local exploits ========================================================== Solaris 8 / 9 /usr/ucb/ps Local Information Leak Exploit ========================================================== !/bin/sh $Id: raptorucbps,v 1.1 2006/07/26 12:15:42 raptor Exp $...

Solaris 89 - usrucbps Local Information Leak

Solaris 89 - usrucbps Local Information Leak !/bin/sh $Id: raptorucbps,v 1.1 2006/07/26 12:15:42 raptor Exp $ raptorucbps - information leak with Solaris /usr/ucb/ps Copyright c 2006 Marco Ivaldi A security vulnerability in the "/usr/ucb/ps" see ps1B command may allow unprivileged local users the...

Microsoft Powerpoint Remote Code Execution Vulnerability

Description Microsoft PowerPoint is prone to a remote code-execution vulnerability. This issue occurs when the application handles malformed record data within a presentation file. A successful exploit of this issue will let attackers execute arbitrary code in the context of the targeted user...

gdm (Gnome Desktop Manager) privilege escalation

Unprivileged user can access gdm configuration if face browser feature is on...

Intel Wireless Service - s24evmon.exe Shared Memory

Intel Wireless Service - s24evmon.exe Shared Memory /////////////////////////////////////////////////////////////////////// //// S24EvMon.exe Intel Wireless Management Service KEY Hunter //// Rubén Santamarta //// [email protected] //// www.reversemode.com //// 28/04/2006...

Intel wireless service s24evmon.exe confidential information disclosure.

S24EvMon.exe is a service which is part at least of the Intel PROset/Wireless software. This application is provided by Intel in order to support intel Wireless Devices based on Spectrum 24 chipsets. This service uses a shared memory section which is created without the proper security descriptor...

DSA-1032-1 zope-cmfplone - programming error

Bulletin has no description...

[SECURITY] [DSA 1032-1] New zope-cmfplone packages fix unprivileged data manipulation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1032-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 12th, 2006 http://www.debian.org/security/faq -...

Microsoft Windows Shell COM Object Remote Code Execution Vulnerability

Description Microsoft Windows Shell is prone to a remote code-execution vulnerability. This issue is due to a flaw in its handling of remote COM objects. Remote attackers may exploit this issue to execute arbitrary machine code in the context of the targeted user. This may facilitate the remote...

opie one time password system privilege escalation

Under some conditions unprivileged user can be validated as 'root'...

OPIE -- arbitrary password change

Problem Description The opiepasswd1 program uses getlogin2 to identify the user calling opiepasswd1. In some circumstances getlogin2 will return "root" even when running as an unprivileged user. This causes opiepasswd1 to allow an unpriviled user to configure OPIE authentication for the root user...