Aladdin Knowledge Systems eSafe Gateway 3.0 - Unicode Script-filtering Bypass

source: https://www.securityfocus.com/bid/2801/info eSafe Gateway is a security utility used for filtering internet content. An html file may be crafted to bypass the script-filtering feature offered by eSafe Gateway. This is done by simply encoding the tag in Unicode format, such that the filter...

Переполнение буфера в HP OpenView NNM (buffer overflow)

Переполнение буфера в suid root утилите ecsd...

eSafe Gateway 2.1 - Script-filtering Bypass

source: https://www.securityfocus.com/bid/2750/info eSafe Gateway is a security utility used for filtering internet content. An html file may be crafted to bypass the script-filtering feature offered by eSafe Gateway. This is done by simply changing the syntax of the function in such a way as to...

CVE-2000-0829

The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a denial of service by creating deeply nested directories in /tmp or /var/tmp/...

CVE-2001-0157

Palm OS 3.5.2 and earlier is affected by a debugging utility in the backdoor mode that lets an attacker with physical access bypass access restrictions and obtain passwords despite a lockout mechanism. The available sources do not specify a patch or remediation steps. Exploit specifics are not pr...

IRIX 5.36.26.36.46.56.5.11 - usrbinlpstat Local Overflow Local Privilege Escalation

IRIX 5.36.26.36.46.56.5.11 - usrbinlpstat Local Overflow Local Privilege Escalation !/bin/sh copyright LAST STAGE OF DELIRIUM jul 2000 poland ://lsd-pl.net/ /usr/bin/lpstat EXECUTABLE=/usr/bin/lpstat FILE=file LIBRARY=lsd DIRECTORY=tmp cd $DIRECTORY cat $FILE $FILE chmod 666 $FILE cat $LIBRARY.c...

IRIX 5.36.x - netprint Arbitrary Shared Library Usage

IRIX 5.36.x - netprint Arbitrary Shared Library Usage // source: https://www.securityfocus.com/bid/2656/info The 'netprint' utility shipped with SGI Irix systems is used to send print jobs to print spoolers on remote hosts. It is installed setuid root by default. At the command line, 'netprint'...

IRIX 5.3/6.x - 'netprint' Arbitrary Shared Library Usage

// source: https://www.securityfocus.com/bid/2656/info The 'netprint' utility shipped with SGI Irix systems is used to send print jobs to print spoolers on remote hosts. It is installed setuid root by default. At the command line, 'netprint' accepts an option to specify the network type -n. This...

Security Hole In Shareplex

Security Hole in Shareplex 2.x ------------------------------ Summary ------- Shareplex Quest Software's product for Oracle database replication contains a security hole which can allow local users to read any file on the system, effectively bypassing the permissions set at the OS level. Details...

Solaris 2.5/2.6/7.0/8 tip - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/2475/info tip is a utility included with Sun Microsystems Solaris Operating Environment. tip allows a user to establish a full duplex terminal connection with a remote host. A problem with tip could lead to a buffer overflow. Due to the improper handli...

FreeBSD 3.5.1/4.2 Ports Package Local Root Exploit

Exploit for bsd platform in category local exploits ================================================== FreeBSD 3.5.1/4.2 Ports Package Local Root Exploit ================================================== / ja-elvis & ko-helvis - FreeBSD 3.5.1 & 4.2 ports package local root exploit vulnerable:...

CVE-2000-1018

The CVE-2000-1018 entry concerns the shred 1.0 file wiping utility. The vulnerability is that shred does not properly open a target file for overwriting or flush its buffers, which can prevent it from fully replacing the file’s data. As a result, local users may be able to recover previously dele...

CVE-2000-1167

Affected software: FreeBSD ppp utility (4.1.1 and earlier). Vulnerability : inadequate access restriction under the nat deny_incoming directive allows remote attackers to connect to the target system. Impact : per the CVSS data, network access with partial confidentiality, integrity, and availabi...

Переполнение буфера в Splitvt

Классическое переполнение буфера в suid-утилите...

CVE-2000-1018

shred 1.0 file wiping utility does not properly open a file for overwriting or flush its buffers, which prevents shred from properly replacing the file's data and allows local users to recover the file...

Дырка в фаерволах Nokia

Переполнение буфера в утилите удаленного администрирования...

Solaris 2.x/7.0/8 - 'Catman' Race Condition (1)

source: https://www.securityfocus.com/bid/2149/info catman is a utility for creating preformatted man pages, distributed as part of the Solaris Operating Environment. A problem exists which could allow local users to overwrite or corrupt files owned by other users. The problem occurs in the...

Solaris 2.x7.08 - Catman Race Condition (1)

Solaris 2.x7.08 - Catman Race Condition 1 source: https://www.securityfocus.com/bid/2149/info catman is a utility for creating preformatted man pages, distributed as part of the Solaris Operating Environment. A problem exists which could allow local users to overwrite or corrupt files owned by...

Ethereal - AFS Buffer Overflow

/ source: https://www.securityfocus.com/bid/1972/info Ethereal is a network auditing utility originally written by Gerald Combs. A problem exists in the Ethereal package which can allow a remote user to execute code. The problem exists in the AFS packet parsing routine. An algorithm string scans...

RedHat 6.2 - sbinrestore Local Privilege Escalation

RedHat 6.2 - sbinrestore Local Privilege Escalation !/bin/sh /sbin/restore exploit for rh6.2 I did not find this weakness my self, all i did was writing this script and some more to make it automatic and easy to use. This exploit should work on all redhat 6.2 systems with /sbin/restore not "fucke...