ActiveX security leaks in the TV owned web game platform

There is a security problem within the architecture / design issues of the BlooMooWeb ActiveX control. BlooMooWeb is an internet game platform for kids, popular mainly in Poland. It has been provided for the TV programme "Krolestwo Maciusia" "The Kingdom of Macius" broadcast in TVP1 - first chann...

Solaris 10 DtPrintinfo/Session Local Root Exploit (x86)

No description provided by source. !/usr/bin/perl Solaris 10 DtPrintinfo/Session Exploit x86 EDUCATIONAL purposes only.... :- by Charles Stevenson core [email protected] greetz to raptor for sharing this vulnerability and in no specific order just want to show love for: nemo, andrewg, jduck,...

SCO Unixware 7.1.3 (ptrace) Local Privilege Escalation Exploit

No description provided by source. / SCO Unixware 7.1.3 ptrace local root exploit ============================================ SCO Unixware 7.1.3 kernel allows unprivledged users to debug binaries. The condition can be exploited by an attacker when he has execute permissions to a file which has t...

Debian DSA-1070-1 : kernel-source-2.4.19 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2004-0427 A local denial of service vulnerability i...

Infecting Elf Binaries to Gain Local Root Exploit

Exploit for linux platform in category local exploits ================================================= Infecting Elf Binaries to Gain Local Root Exploit ================================================= gcc infR3.s -o infR3 strip infR3 find a writable binary example: ls ./infR3 /bin/ls when root...

Netragard Security Advisory 2006-06-24

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Netragard, L.L.C. -- Vulnerability Research and Exploitation Team www.netragard.com Advisory Information - ---------------------------------------------------------------------- Contact: : Adriel T. Desautels Advisory ID : NETRAGARD-20060624 Product...

[Full-disclosure] Buffer Overflow and Installation Script Error in Firebird 1.5.3

--------------------------------------------------------------------------- Buffer Overflow and Installation Script Error in Firebird 1.5.3 --------------------------------------------------------------------------- Author: Jose Antonio Coret Joxean Koret Date: 2005-02-18 Location: Basque Country...

SCO Unixware 7.1.3 - ptrace Local Privilege Escalation

SCO Unixware 7.1.3 - ptrace Local Privilege Escalation / SCO Unixware 7.1.3 ptrace local root exploit ============================================ SCO Unixware 7.1.3 kernel allows unprivledged users to debug binaries. The condition can be exploited by an attacker when he has execute permissions t...

CVE-2006-0646

ld in SUSE Linux 9.1 through 10.0, and SLES 9, in certain circumstances when linking binaries, can leave an empty RPATH or RUNPATH, which allows local attackers to execute arbitrary code as other users via by running an ld-linked application from the current directory, which could contain an...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix a number of security issues as well as other bugs are now available for Red Hat Enterprise Linux 2.1 64 bit architectures. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the...

Ubuntu 4.10 : linux-source-2.6.8.1 vulnerabilities (USN-30-1)

CAN-2004-0883, CAN-2004-0949 : During an audit of the smb file system implementation within Linux, several vulnerabilities were discovered ranging from out of bounds read accesses to kernel level buffer overflows. To exploit any of these vulnerabilities, an attacker needs control over the answers...

Ubuntu 4.10 : perl vulnerability (USN-94-1)

Paul Szabo discovered another vulnerability in the rmtree function in File::Path.pm. While a process running as root or another user was busy deleting a directory tree, a different user could exploit a race condition to create setuid binaries in this directory tree, provided that he already had...

Ubuntu 4.10 : linux-source-2.6.8.1 vulnerability (USN-39-1)

USN-30-1 fixed several flaws in the Linux ELF binary loader's handling of setuid binaries. Unfortunately it was found that these patches were not sufficient to prevent all possible attacks on 64-bit platforms, so previous amd64 kernel images were still vulnerable to root privilege escalation if...

security flaw

Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452...

[Full-disclosure] SCOSA-2005.52 OpenServer 6.0.0 : KAME Racoon Daemon Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SCO Security Advisory Subject: OpenServer 6.0.0 : KAME Racoon Daemon Denial of Service Vulnerability Advisory number: SCOSA-2005.52 Issue date: 2005 November 28 Cross reference: sr895064 erg712954 fz533033 CVE-2005-0398 1. Problem Description Racoon i...

security flaw

Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452...

Fedora Core 3 : perl-5.8.5-14.FC3 (2005-600)

Paul Szabo discovered another vulnerability in the File::Path::rmtree function of perl, the popular scripting language. When a process is deleting a directory tree, a different user could exploit a race condition to create setuid binaries in this directory tree, provided that he already had write...

CVE-2002-1963

Linux kernel 2.4.1 through 2.4.19 sets root's NRRESERVEDFILES limit to 10 files, which allows local users to cause a denial of service resource exhaustion by opening 10 setuid binaries...

CVE-2005-0448

Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452...

CVE-2005-0448

Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452...