Security Update: [CSSA-2001-SCO.21] Open Unix, UnixWare 7: dtaction argument buffer overflow

To: [email protected] [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: Open Unix, UnixWare 7: dtaction argument buffer overflow Advisory number: CSSA-2001-SCO.21 Issue date: 2001 October 1...

lpplus.txt

Multiple Security Holes in LPPlus --------------------------------- echo8, 8/23/2000 Summary ------- LPPlus is Plus Technologies' print management system for unix. Versions prior to v3.3.x have several serious security holes, some of which undermine the integrity of the printing subsystem, some o...

Security Update: [CSSA-2001-SCO.15] Open Unix: lpsystem buffer overflow

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: Open Unix: lpsystem buffer overflow Advisory number: CSSA-2001-SCO.15 Issue date: 2001 August 28 Cross reference: 1. Problem Description A lon...

SCO UnixWare uucico contains buffer overflow via long string of characters sent as command line argument

Overview A buffer overflow in uucico, part of the UUCP package on SCO systems, can allow an intruder to gain elevated privileges. Description SCO UnixWare 7 ships with a utility package called UUCP. The UUCP package allows for the copying of files between different UNIX systems and the sending of...

Security Update: [CSSA-2001-SCO.6] UnixWare: statd buffer overflow

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: UnixWare: statd buffer overflow Advisory number: CSSA-2001-SCO.6 Issue date: 2001 July 2 Cross reference: 1. Problem Description The nfs daemo...

Security Update: [CSSA-2001-SCO.5] UnixWare: packaging tool exploits

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: UnixWare: packaging tool exploits Advisory number: CSSA-2001-SCO.5 Issue date: 2001 June 29 Cross reference: 1. Problem Description The...

Security Update: [CSSA-2001-SCO.4] UnixWare: uucp utilities buffer overflows

To: [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: UnixWare - uucp utilities buffer overflows Advisory number: CSSA-2001-SCO.4 Issue date: 2001 June, 27 Cross reference: 1. Problem Description The uucp utilities are...

Security Update: [CSSA-2001-SCO.2] UnixWare - su buffer overflow

To: [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: UnixWare - su buffer overflow Advisory number: CSSA-2001-SCO.2 Issue date: 2001 June, 26 Cross reference: 1. Problem Description The su command is vulnerable to a comman...

Linux Kernel 2.2.18 (RedHat 6.27.0 2.2.142.2.182.2.18ow4) - ptraceexecve Race Condition Privilege Escalation (2)

Linux Kernel 2.2.18 RedHat 6.27.0 2.2.142.2.182.2.18ow4 - ptraceexecve Race Condition Privilege Escalation 2 / source: https://www.securityfocus.com/bid/2529/info The Linux kernel is the core of all distributions of the Linux Operating System. It was originally written by Linus Torvalds, and is...

SCO Open Server 5.0.6 - lpforms Buffer Overflow

SCO Open Server 5.0.6 - lpforms Buffer Overflow source: https://www.securityfocus.com/bid/2554/info SCO OpenServer 5.0.6 and possibly earlier versions ships with several suid bin executables used in printer administration and related tasks. This includes lpforms, a component used to manage and...

Solaris 7/8 - ximp40 Library Buffer Overflow

// source: https://www.securityfocus.com/bid/2322/info Solaris is a variant of the UNIX Operating System, maintained and distributed by Sun Microsystems. It is freely available, with source code available. A problem in the ximp40 library packaged with Openwin could allow a user to gain elevated...

glibc 2.2 local vulnerability on setuid binaries

glibc-2.2 contains a local vulnerability that affects all setuid root binaries. Any user on affected systems will be able to read any file on the system through a simple process: The user sets the RESOLVHOSTCONF environment variable to the name of the file that they wish to read, then runs any...

Fixed local AIX V43 vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Just for the record, here are some local AIX vulnerabilities we have found, and which have been fixed by IBM this year. If you have been applying fixes, there should be no problem with these anymore. But it might be interesting to know what some of those massive...

dump 0.4b15 (RedHat 6.2) - Local Privilege Escalation

dump 0.4b15 RedHat 6.2 - Local Privilege Escalation / dump-0.4b15x.c dump-0.4b15 exploit: Redhat 6.2 dump command executes external program with suid priviledge. affected: /sbin/dump /sbin/dump.static /sbin/restore /sbin/restore.static Bug found by [email protected] This example was coded by...

[SECURITY] New Debian xmcd packages released

Package: xmcd Vulnerability: untrustworthy privileged binaries Debian-specific: yes Vulnerable: yes The Debian GNU/Linux xmcd package has historically installed two setuid helpers for accessing cddb databases and SCSI cdrom drives. More recently, the package offered the administrator the chance t...

[SECURITY] New Debian xmcd packages released

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz November 21, 2000 - ---------------------------------------------------------------------------- Package: xmcd Vulnerability:...

FreeBSD-SA-00:60.boa

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:60 Security Advisory FreeBSD, Inc. Topic: boa web server allows arbitrary file access/execution Category: ports Module: boa Announced: 2000-10-30 Credits: Lluis Mora...

Multiple Security Holes in LPPlus

LPPlus is Plus Technologies' print management system for unix. It contains several serious security holes, some of which undermine the integrity of the printing subsystem, some of which threaten the security of the system on which the product is installed. Details ------- Hole 1: Of the 74 binari...

New Tool: initd_.sh;

/ Attachment did not send... resending sorry for the bulk / Heyas ; I wrote this tool in the last couple of days to see if I could actually implement a program that would automatically attack local binaries and attempt to find exploits in respect to buffer overflows via command line switches...

Multisoft FlagShip 4.4 - Installation Permission

source: https://www.securityfocus.com/bid/1586/info A vulnerability exists in the installation of Multisoft's FlagShip 4.4 product. Some binaries are installed with world writable permissions. This may allow an attacker to alter a binary and cause other users to execute arbitrary code. The files:...