Privilege escalation

A local privilege escalation vulnerability has been identified in the SwitchVPN client 2.1012.03 for macOS. Due to over-permissive configuration settings and a SUID binary, an attacker is able to execute arbitrary binaries as root...

CVE-2018-18860

A local privilege escalation vulnerability has been identified in the SwitchVPN client 2.1012.03 for macOS. Due to over-permissive configuration settings and a SUID binary, an attacker is able to execute arbitrary binaries as root...

Privilege Escalation

libhesiod.so is vulnerable to a privilege escalation. The library does not safely check the EUID with the UID parameters, overriding configuration values with environment variable. This can allow a malicious user to use the HESIODCONFIG or HESDOMAIN environment variable to run arbitrary binaries...

CVS Kit CVS Server 1.10 .8 Checkin.prog Binary Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1524/info A CVS committer can execute arbitrary binaries by using Checkin.prog. Usually CVS/Checkin.prog in a working directory is copied from CVSROOT/modules when the directory is checkouted and it is sent back to the...

Xerver Multiple Vulnerabilities

Xerver is prone to multiple vulnerabilities including source code disclosure, denial of service, security bypass, and directory- traversal issues. Successfully exploiting these issues may allow an attacker to disclose sensitive information, bypass certain security-restrictions, perform...

Local privilege escalation vulnerability in Cisco VPN client

======= Summary ======= Name: Permissively-ACLed cvpnd.exe allows interactive users to run arbitrary binaries with Local System Privileges Release Date: 16 August 2007 Reference: NGS00503 Discover: Dominic Beecher [email protected] Vendor: Cisco Vendor Reference: cisco-sa-20070815-vpnclient...

Nortel Networks Optivity NETarchitect 2.0 - PATH

source: https://www.securityfocus.com/bid/907/info NETarchitect is an application for simplifying the task of designing and deploying complex switched network system configurations, produced by Nortel Networks and usually shipped with the Optivity Network Configuration System suite of utilities. ...