Nortel Networks Optivity NETarchitect 2.0 - PATH

source: https://www.securityfocus.com/bid/907/info NETarchitect is an application for simplifying the task of designing and deploying complex switched network system configurations, produced by Nortel Networks and usually shipped with the Optivity Network Configuration System suite of utilities. ...

SunOS 4.1.1 - usrreleasebinmakeinstall Local Privilege Escalation

SunOS 4.1.1 - usrreleasebinmakeinstall Local Privilege Escalation source: https://www.securityfocus.com/bid/21/info This applies to sites that have installed Sun Source tapes only. The Sun distribution of sources sunsrc has an installation procedure which creates the directory /usr/release/bin an...

SunOS 4.1.1 - '/usr/release/bin/winstall' Local Privilege Escalation

source: https://www.securityfocus.com/bid/22/info This applies to sites that have installed Sun Source tapes only. The Sun distribution of sources sunsrc has an installation procedure which creates the directory /usr/release/bin and installs two setuid root files in it: makeinstall and winstall...

Mandriva Linux Mandrake 6.0 Gnome Libs 1.0.8 - espeaker Local Buffer Overflow

Mandriva Linux Mandrake 6.0 Gnome Libs 1.0.8 - espeaker Local Buffer Overflow source: https://www.securityfocus.com/bid/663/info A buffer overflow vulnerabilityin GNOME's shared libraries handling of the 'espeaker' command line argument may allow local users to attack setuid binaries linked again...

Mandriva Linux Mandrake 6.0 / Gnome Libs 1.0.8 - 'espeaker' Local Buffer Overflow

source: https://www.securityfocus.com/bid/663/info A buffer overflow vulnerabilityin GNOME's shared libraries handling of the 'espeaker' command line argument may allow local users to attack setuid binaries linked against these libraries to obtain root access. Calling a program linked against GNO...

netbsd.noexec.txt

Date: Thu, 18 Mar 1999 21:27:39 +1100 From: matthew green To: [email protected] Subject: NetBSD Security Advisory 1999-007 -----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 1999-007 ================================= Topic: noexec mount flag is not properly handled by non-root mount...

backhoe.article

backhoe article, by miff 1. what is it? backhoe is a backdoor daemon that copies a rootshell into /tmp periodically, then deletes it. You set the frequency that you want rootshells to appear, and you set the amount of time that they will persist before backhoe deletes them. This gives the user wh...

digital.unix.bofs.txt

Date: Fri, 19 Feb 1999 14:18:18 -0800 From: Lamont Granquist To: [email protected] Subject: More Buffer Overflows in Digital Unix 1. No return-into-libc exploit for Digital Unix I didn't understand the return-into-libc method really prior to my previous BUGTRAQ post. Since then, I understand i...

[SECURITY] Security fixed versions of sparc binaries available

==================================================================== Debian GNU/Linux Security May 17, 1998 We have received reports that former versions of procps, shadow, fakeroot, gzip, perl and bind in hamm were vulnerable to some exploits. Please refer to the following web pages to get more...

BSD 4.2 - 'fingerd' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/2/info fingerd is a remote user information server that implements the protocol defined in RFC742. There exists a buffer overflow in finderd that allows a remote attacker to execute any local binaries. finderd reads input from its socket using the gets...

Windows 8 Dynamic Update

This category is used by Windows Setup and contains updates to the Windows 8 Setup binaries, as well as critical security updates and drivers for the operating system that is being installed. WSUS administrators do not need to select this category...

Security Update For Exchange Server 2013 SP1 (KB3150501)

This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe of the vulnerabilities could allow information disclosure if an attacker sends a specially crafted image URL in an Outlook Web Access OWA message that is loaded, without warning or filtering, from the...

Update Rollup 14 for Exchange Server 2010 Service Pack 3 (KB3151097)

Microsoft is issuing this security update for Oracle binaries to help ensure that all customers using this third-party code in Microsoft Exchange are protected from these vulnerabilities...

Host Integration Server.2004.SNADMOD

Presence of affected bin...

Update Rollup 20 for Exchange Server 2007 Service Pack 3 (KB3151086)

Microsoft is issuing this security update for Oracle binaries to help ensure that all customers using this third-party code in Microsoft Exchange are protected from these vulnerabilities...

Security Update For Exchange Server 2016 RTM (KB3150501)

This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe of the vulnerabilities could allow information disclosure if an attacker sends a specially crafted image URL in an Outlook Web Access OWA message that is loaded, without warning or filtering, from the...

Security Update For Exchange Server 2013 CU11 (KB3150501)

This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe of the vulnerabilities could allow information disclosure if an attacker sends a specially crafted image URL in an Outlook Web Access OWA message that is loaded, without warning or filtering, from the...