DSA-319 webmin - session ID spoofing

Bulletin has no description...

CVE-2002-0359

xfsmd for IRIX 6.5 through 6.5.16 uses weak authentication, which allows remote attackers to call dangerous RPC functions, including those that can mount or unmount xfs file systems, to gain root privileges...

CVE-2003-0098

Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote attackers to gain root privileges, possibly via format strings in a request to a slave server...

ATP HTTPd 0.4 - Single Byte Buffer Overflow

// source: https://www.securityfocus.com/bid/5956/info ATP httpd is a lightweight HTTP server. A vulnerability has been reported in ATP httpd that may result in compromise of root access to remote attackers. It is possible to overwrite the least significant byte of the saved base pointer with a...

FreeBSD privilege elevation vulnerability

Overview A locally exploitable privilege elevation vulnerability exists in FreeBSD. Description A locally exploitable privilege elevation vulnerability exists in FreeBSD. For more information, please see the Pine Internet Security Advisory. --- Impact A local user can gain root privileges. ---...

SSH (x2) Remote Root Exploit

No description provided by source. http://www.milw0rm.com/sploits/x2.tgz milw0rm.com 2002-05-01...

Advisory CA-2001-33 Multiple Vulnerabilities in WU-FTPD

CERT Advisory CA-2001-33 Multiple Vulnerabilities in WU-FTPD Original release date: November 29, 2001 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Systems running WU-FTPD and its derivatives Overview WU-FTPD is a widely deploy...

Solaris in.lpd Transfer Job Routine Remote Buffer Overflow

The remote lpd daemon seems to be vulnerable to a buffer overflow when sent too many 'Receive data file' commands. An attacker may use this flaw to gain root on this host. C Tenable Network Security, Inc. This plugin was realized thanks to the help of the french "eXperts" working group -...

CVE-2001-0456

postinst installation script for Proftpd in Debian 2.2 does not properly change the "run as uid/gid root" configuration when the user enables anonymous access, which causes the server to run at a higher privilege than intended...

Переполнение буфера в MDBMS (buffer overflow)

переполнение буфера дает удаленный root-доступ...

[SECURITY] [DSA-048-1] remote cfingerd exploit

Package : cfingerd Problem type : remote printf format attack Debian-specific: no Megyer Laszlo report on Bugtraq that the cfingerd Debian as distributed with Debian GNU/Linux 2.2 was not careful in its logging code. By combining this with an off-by-one error in the code that copied the username...

Format string input validation error in wu-ftpd site_exec() function

Overview A vulnerability involving an input validation error in the "site exec" command has recently been identified in the Washington University ftpd wu-ftpd software package. Sites running affected systems are advised to update their wu-ftpd software as soon as possible. A similar but distinct...

Luca Deri ntop 1.2 a7-9/1.3.1 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/1576/info ntop is a network usage monitoring tool for unix systems. It can be invoked at the console or as a server daemon, presenting statistics information via http with the -w parameter. In this mode, it is vulnerable to a buffer overflow before the...

Stalker CommuniGate Pro 3.2.4 - Arbitrary File Read

source: https://www.securityfocus.com/bid/1493/info A vulnerability exists in the CommuniGate Pro product, from Stalker. It is possible to exploit this vulnerability to read arbitrary files on the filesystem. As CommuniGate Pro runs as root, any file can be accessed. Using this flaw, it is possib...

CVE-1999-0127

swinstall and swmodify commands in SD-UX package in HP-UX systems allow local users to create or overwrite arbitrary files to gain root access...

CVE-1999-0977

Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGTPROCSERVICE request...

AIX FTPd libc Library Remote Buffer Overflow

It was possible to crash the remote FTP server by issuing the command : CEL aaaa...aaaa This problem is known as the 'AIX FTPd' overflow and may allow the remote user to easily gain access to the root super-user account on the remote system. C Tenable Network Security, Inc. include"compat.inc"; i...

crontab_exploit.txt

Subject: Vixie Crontab exploit code To: [email protected] Vixie Crontab exploit code begin vixie-ex ---------------------------------------------------------------------- !/bin/sh Vixie crontab exploit Local user can gain root access. Tested redhat linux : 4.2, 5.0, 5.1, 6.0 Tested vixie...

CVE-1999-0421

During a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root access by logging in to the root account without a password...

HP JetAdmin 1.0.9 Rev. D - symlink

source: https://www.securityfocus.com/bid/157/info A vulnerability exists in HP's JetAdmin Rev. D.01.09 software. Due to its failure to check if it is following a symbolic link, it is possible for an attacker to create a link from /tmp/jetadmin.log to anywhere on the filesystem, with permissions...