414 matches found
Debian DSA-262-1 : samba - remote exploit
Sebastian Krahmer of the SuSE security audit team found two problems in samba, a popular SMB/CIFS implementation. The problems are : - a buffer overflow in the SMB/CIFS packet fragment re-assembly code used by smbd. Since smbd runs as root an attacker can use this to gain root access to a machine...
freebsd/x86 chown 0:0 , chmod 6755 & execve /tmp/sh 44 bytes
freebsd/x86 chown 0:0 , chmod 6755 & execve /tmp/sh 44 bytes. Shellcode exploit for freebsdx86 platform / FreeBSD shellcode chown"/tmp/sh", 0, 0; chmod"/tmp/sh", 06755; 44 bytes Claes M. Nyberg 20020209 , / / void mainvoid asm" xor %eax, %eax eax = 0 pushl %eax string ends with NULL pushl...
bftpd < 1.0.14 chown Command Overflow
Binary data 1828.prm...
SUSE-SA:2004:024: kernel
The remote host is missing the patch for the advisory SUSE-SA:2004:024 kernel. This kernel is vulnerable to a race condition in the 64-bit file offset handling code. The file offset pointer fpos is changed during reading, writing, and seeking through a file to point to the current position in a...
CVE-2003-0704
KisMAC before 0.05d is affected. The vulnerability arises because it trusts user-supplied variables when chown’ing files or directories, allowing a local user to escalate privileges via the $DRIVER_KEXT environment variable in the scripts: viha_driver.sh, macjack_load.sh, airojack_load.sh, setuid...
DEBIAN-CVE-2003-0086
The code for writing reg files in Samba before 2.2.8 allows local users to overwrite arbitrary files via a race condition involving chown...
CVE-2003-0086
The code for writing reg files in Samba before 2.2.8 allows local users to overwrite arbitrary files via a race condition involving chown...
Multiple bugs in Samba
Buffer overflow on SMB/CIFS packet re-assembly, chown race conditions...
[SECURITY] [DSA-262-1] samba security fix
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-262-1 [email protected] http://www.debian.org/security/ Wichert Akkerman March 15, 2003 -...
Low: Red Hat Security Advisory: fileutils security update
Updated fileutils packages are available which fix a race condition in recursive remove and move commands. The fileutils package includes a number of GNU versions of common and popular file management utilities. A race condition in recursive use of rm and mv commands in fileutils 4.1 and earlier...
ASI Oracle Security Alert: CHOWN Path Environment Variable Vulnerability
CHOWN Path Environment Variable Vulnerability For additional details, the official advisories from Oracle Corporation can be downloaded from: http://otn.oracle.com/deploy/security/pdf/dbsmpalert.pdf Summary: The vulnerability only affects Oracle 8.0.5 and 8.1.5. The dbsnmp file executes the CHOWN...
bftpd Multiple Command Remote Overflow
The version of bftpd running on the remote host is vulnerable to a remote buffer overflow attack when issued very long arguments to the SITE CHOWN command. A remote attacker could exploit this issue to crash the FTP server, or possibly execute arbitrary code. TRUSTED...
Potential Buffer Overflow vulnerability in bftpd-1.0.13
There is a potential buffer overflow vulnerability in the command "SITE CHOWN" 230 User logged in. site chown AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA.AAAAAAAAAA A 550 User 'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA' not found. Connection closed by foreign host. gdb /usr/sbin/bftpd 18214 ............. Loade...