CVE-2005-1396

Race condition in Ce/Ceterm aka ARPUS/Ce 2.5.4 and earlier allows local users to write to arbitrary files via a symlink attack on the ceeditlog temporary file...

CVE-2005-1395

Buffer overflow in Ce/Ceterm aka ARPUS/Ce 2.5.4 and earlier may allow local users to gain privileges via a long 1 XAPPLRESLANGPATH or 2 XAPPLRESDIR environment variable, or 3 command line argument...

DMA[2005-0501a] - 'ARPUS/Ce setuid buffer overflow and file overwrite'

DMA2005-0501a - 'ARPUS/Ce setuid buffer overflow and file overwrite' Author: Kevin Finisterre Vendor: http://www.swlink.net/styma/ce.shtml, http://168.158.26.15/ce/ce/ce.html Product: 'Ce/Ceterm' References: http://www.digitalmunition.com/DMA2005-0501a.txt Description: Ce/Ceterm aka. ARPUS/Ce is ...

CVE-2005-1396

The CVE-2005-1396 entry describes a race condition in Ce/Ceterm (aka ARPUS/Ce) versions 2.5.4 and earlier. The underlying issue allows local users to write to arbitrary files via a symlink attack on the ce_edit_log temporary file. Affected component: Ce/Ceterm, vulnerable file handling during log...

CVE-2005-1396

Race condition in Ce/Ceterm aka ARPUS/Ce 2.5.4 and earlier allows local users to write to arbitrary files via a symlink attack on the ceeditlog temporary file...

CVE-2005-1395

CVE-2005-1395 affects Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier. The vulnerability is a buffer overflow that can allow local users to gain privileges when a long environment variable (XAPPLRESLANGPATH or XAPPLRESDIR) is set or via a long command line argument. The Red Hat and NVD entries confirm...

CVE-2005-1395

Buffer overflow in Ce/Ceterm aka ARPUS/Ce 2.5.4 and earlier may allow local users to gain privileges via a long 1 XAPPLRESLANGPATH or 2 XAPPLRESDIR environment variable, or 3 command line argument...

ARPUS/Ce Local Overflow Exploit (setuid) (perl)

No description provided by source. !/usr/bin/perl -w Setuid ARPUS/ce exploit by KF - kflistsatdigitalmunitiondotcom - 4/21/05 Copyright Kevin Finisterre kfinisterre@threat:/tmp$ ./ceex.pl sh-2.05b id uid=0root gid=1000kfinisterre groups=20dialout,24cdrom,25floppy,29audio,44video,1000kfinisterre 5...

ARPUS/Ce Local File Overwrite Exploit (setuid)

No description provided by source. / Copyright Kevin Finisterre - ripped from my perlex.c DISCLAIMER I am in no way responsible for your stupidity. DISCLAIMER I am in no way liable for any damages caused by compilation and or execution of this code. WARNING DO NOT RUN THIS UNLESS YOU KNOW WHAT YO...

ARPUS/Ce - Local Overflow (setuid)

!/usr/bin/perl -w Setuid ARPUS/ce exploit by KF - kflistsatdigitalmunitiondotcom - 4/21/05 Copyright Kevin Finisterre kfinisterre@threat:/tmp$ ./ceex.pl sh-2.05b id uid=0root gid=1000kfinisterre groups=20dialout,24cdrom,25floppy,29audio,44video,1000kfinisterre 57 bytes long $sc = "\x90"x512; $sc ...

PT-2001-1393 · Microsoft · Wince

Name of the Vulnerable Software and Affected Versions: WinCE version 3.0.9348 Description: The issue allows remote attackers to spoof or hijack TCP connections due to the generation of predictable TCP Initial Sequence Numbers ISNs. Recommendations: For WinCE version 3.0.9348, at the moment, there...