CVE-2008-3168

The files utility in Empire Server before 4.3.15 discloses the world creation time, which makes it easier for attackers to determine the PRNG seed...

CVE-2008-3168: Exposure of Sensitive Information to an Unauthorized Actor

The files utility in Empire Server before 4.3.15 discloses the world creation time, which makes it easier for attackers to determine the PRNG seed...

QNX phgrafx privilege escalation

suid root utility buffer overflow on .pal files parsing...

QNX Neutrino RTOS 6.3 - 'phgrafx' Local Buffer Overflow

source: https://www.securityfocus.com/bid/30024/info QNX Neutrino RTOS is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. This issue affects the 'phgrafx' utility. Attackers can exploit this issue to execute arbitrary cod...

LHA Arbitrary Command Execution Vulnerability with Shell Metacharacter in Directory Name

Overview LHA is vulnerable to arbitrary command execution due to improper handling of directory names cantaining shell metacharacters. Impact An remote attacker could execute arbitrary command. Solution Please refer to the 'Vendor Information' section for official remediation and take appropriate...

Symantec Altiris Client Service 6.8.378 Local Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ========================================================================== Symantec Altiris Client Service 6.8.378 Local Privilege Escalation Exploit ========================================================================== // 0day PRIVATE...

iDefense Security Advisory 05.12.08: Microsoft Windows I2O Filter Utility Driver (i2omgmt.sys) Local Privilege Escalation Vulnerability

iDefense Security Advisory 05.12.08 http://labs.idefense.com/intelligence/vulnerabilities/ May 12, 2008 I. BACKGROUND Intelligent Input/Output I2O is a defunct computer input/output I/O specification. i2omgmt.sys is a Windows driver for the I2O Utility Filter. For more background information abou...

Design/Logic Flaw

The I2O Utility Filter driver i2omgmt.sys 5.1.2600.2180 for Microsoft Windows XP sets Everyone/Write permissions for the "\.\I2OExc" device interface, which allows local users to gain privileges. NOTE: this issue can be leveraged to overwrite arbitrary memory and execute code via an IOCTL call...

CVE-2008-0322

The I2O Utility Filter driver i2omgmt.sys 5.1.2600.2180 for Microsoft Windows XP sets Everyone/Write permissions for the "\.\I2OExc" device interface, which allows local users to gain privileges. NOTE: this issue can be leveraged to overwrite arbitrary memory and execute code via an IOCTL call...

CVE-2008-0322

The CVE-2008-0322 issue affects the I2O Utility Filter driver (i2omgmt.sys) version 5.1.2600.2180 on Windows XP. The .\

CVE-2008-0322: Incorrect Permission Assignment for Critical Resource

The I2O Utility Filter driver i2omgmt.sys 5.1.2600.2180 for Microsoft Windows XP sets Everyone/Write permissions for the "\.\I2OExc" device interface, which allows local users to gain privileges. NOTE: this issue can be leveraged to overwrite arbitrary memory and execute code via an IOCTL call...

adv94-K-159-2008.txt

ECHOADV94$2008 ----------------------------------------------------------------------------------------- ECHOADV94$2008 Kmita Mail = 3.0 file Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran Addahroni...

IBM DB2 database server multiple security vulnerabilities

Privilege escalation with administration utility, db2dasStartStopFMDaemon buffer overflow. JAR files DoS. Code execution with ADMINSPC/ADMINSPC2. Arbitrary files overwrite with SYSPROC.NNSTAT...

am-utils symbolic links security vulnerability

expn utility unsafe temporary files creation...

Novell eDirectory eMBox Utility Unauthorized Access

The remote host is running eDirectory, a popular directory service software from Novell. A vulnerability in the eMBox utility included with the software, may allow an unauthenticated attacker to access local files or cause a denial of service condition. C Tenable Network Security, Inc...

Novell eDirectory eMBox Utility Unauthorized Access (uncredentialed check)

The remote host is running eDirectory, a popular directory service software from Novell. A vulnerability in the eMBox utility included with the software allows an unauthenticated attacker to access local files or cause a denial of service condition. Nessus was able to query the list of available...

[SECURITY] Fedora 8 Update: bzip2-1.0.4-13.fc8

Bzip2 is a freely available, patent-free, high quality data compressor. Bzip2 compresses files to within 10 to 15 percent of the capabilities of the best techniques available. However, bzip2 has the added benefit of being approximately two times faster at compression and six times faster at...

debian-goodies Scripts shell characters vulnerabilities

Shell characters problem via process names in checkrestart utility...

Novell eDirectory 8.x - eMBox Utility edirutil Command

Novell eDirectory 8.x - eMBox Utility edirutil Command source: https://www.securityfocus.com/bid/28441/info Novell eDirectory is prone to an unspecified vulnerability that can result in unauthorized file access or a denial of service. Unauthenticated attackers can exploit this issue. This issue...

Novell eDirectory 8.x - eMBox Utility 'edirutil' Command

source: https://www.securityfocus.com/bid/28441/info Novell eDirectory is prone to an unspecified vulnerability that can result in unauthorized file access or a denial of service. Unauthenticated attackers can exploit this issue. This issue affects eDirectory 8.8 and earlier as well as 8.7.3.9 an...