Security Update: [CSSA-2001-SCO.6] UnixWare: statd buffer overflow

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: UnixWare: statd buffer overflow Advisory number: CSSA-2001-SCO.6 Issue date: 2001 July 2 Cross reference: 1. Problem Description The nfs daemo...

Security Update: [CSSA-2001-SCO.5] UnixWare: packaging tool exploits

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: UnixWare: packaging tool exploits Advisory number: CSSA-2001-SCO.5 Issue date: 2001 June 29 Cross reference: 1. Problem Description The...

Security Update: [CSSA-2001-SCO.4] UnixWare: uucp utilities buffer overflows

To: [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: UnixWare - uucp utilities buffer overflows Advisory number: CSSA-2001-SCO.4 Issue date: 2001 June, 27 Cross reference: 1. Problem Description The uucp utilities are...

Security Update: [CSSA-2001-SCO.2] UnixWare - su buffer overflow

To: [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: UnixWare - su buffer overflow Advisory number: CSSA-2001-SCO.2 Issue date: 2001 June, 26 Cross reference: 1. Problem Description The su command is vulnerable to a comman...

Linux Kernel 2.2.18 (RedHat 6.27.0 2.2.142.2.182.2.18ow4) - ptraceexecve Race Condition Privilege Escalation (2)

Linux Kernel 2.2.18 RedHat 6.27.0 2.2.142.2.182.2.18ow4 - ptraceexecve Race Condition Privilege Escalation 2 / source: https://www.securityfocus.com/bid/2529/info The Linux kernel is the core of all distributions of the Linux Operating System. It was originally written by Linus Torvalds, and is...

SCO Open Server 5.0.6 - lpforms Buffer Overflow

SCO Open Server 5.0.6 - lpforms Buffer Overflow source: https://www.securityfocus.com/bid/2554/info SCO OpenServer 5.0.6 and possibly earlier versions ships with several suid bin executables used in printer administration and related tasks. This includes lpforms, a component used to manage and...

Solaris 7/8 - ximp40 Library Buffer Overflow

// source: https://www.securityfocus.com/bid/2322/info Solaris is a variant of the UNIX Operating System, maintained and distributed by Sun Microsystems. It is freely available, with source code available. A problem in the ximp40 library packaged with Openwin could allow a user to gain elevated...

glibc 2.2 local vulnerability on setuid binaries

glibc-2.2 contains a local vulnerability that affects all setuid root binaries. Any user on affected systems will be able to read any file on the system through a simple process: The user sets the RESOLVHOSTCONF environment variable to the name of the file that they wish to read, then runs any...

Fixed local AIX V43 vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Just for the record, here are some local AIX vulnerabilities we have found, and which have been fixed by IBM this year. If you have been applying fixes, there should be no problem with these anymore. But it might be interesting to know what some of those massive...

dump 0.4b15 (RedHat 6.2) - Local Privilege Escalation

dump 0.4b15 RedHat 6.2 - Local Privilege Escalation / dump-0.4b15x.c dump-0.4b15 exploit: Redhat 6.2 dump command executes external program with suid priviledge. affected: /sbin/dump /sbin/dump.static /sbin/restore /sbin/restore.static Bug found by [email protected] This example was coded by...

[SECURITY] New Debian xmcd packages released

Package: xmcd Vulnerability: untrustworthy privileged binaries Debian-specific: yes Vulnerable: yes The Debian GNU/Linux xmcd package has historically installed two setuid helpers for accessing cddb databases and SCSI cdrom drives. More recently, the package offered the administrator the chance t...

[SECURITY] New Debian xmcd packages released

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz November 21, 2000 - ---------------------------------------------------------------------------- Package: xmcd Vulnerability:...

FreeBSD-SA-00:60.boa

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:60 Security Advisory FreeBSD, Inc. Topic: boa web server allows arbitrary file access/execution Category: ports Module: boa Announced: 2000-10-30 Credits: Lluis Mora...

Multiple Security Holes in LPPlus

LPPlus is Plus Technologies' print management system for unix. It contains several serious security holes, some of which undermine the integrity of the printing subsystem, some of which threaten the security of the system on which the product is installed. Details ------- Hole 1: Of the 74 binari...

New Tool: initd_.sh;

/ Attachment did not send... resending sorry for the bulk / Heyas ; I wrote this tool in the last couple of days to see if I could actually implement a program that would automatically attack local binaries and attempt to find exploits in respect to buffer overflows via command line switches...

Multisoft FlagShip 4.4 - Installation Permission

source: https://www.securityfocus.com/bid/1586/info A vulnerability exists in the installation of Multisoft's FlagShip 4.4 product. Some binaries are installed with world writable permissions. This may allow an attacker to alter a binary and cause other users to execute arbitrary code. The files:...

Multisoft FlagShip 4.4 - Installation Permission

Multisoft FlagShip 4.4 - Installation Permission source: https://www.securityfocus.com/bid/1586/info A vulnerability exists in the installation of Multisoft's FlagShip 4.4 product. Some binaries are installed with world writable permissions. This may allow an attacker to alter a binary and cause...

Advisory: mailman local compromise

Author : Stan Bubrouski Date : August 1, 2000 Package : mailman Versions affected : 2.0beta3 released: 2000-Jun-28 23:25 2.0beta4 released: 2000-Jul-06 21:27 Severity : access to group mailman binaries are installed as which usually mailman. Most directories in a mailman install are mode 2755 as...

Mandrake 7.07.1 RedHat Kon2 0.3.9 - usrbinfld Input File Overflow

Mandrake 7.07.1 RedHat Kon2 0.3.9 - usrbinfld Input File Overflow / source: https://www.securityfocus.com/bid/1371/info KON Kanji On Console is a package for displaying Kanji text under Linux and comes with two suid binaries which are vulnerable to buffer overflows. "fld", one of the vulnerable...

userv security boundary tool 1.0.1 (SECURITY FIX)

-----BEGIN PGP SIGNED MESSAGE----- SUMMARY This is a combination security advisory and release announcement. GNU userv 1.0.0 and earlier versions have a vulnerability where under some conditions some local users may be able carry out unauthorised actions, or unlikely be able to take control of...