8846 matches found
ksrt.accelerated-x.bof.txt
Date: Sat, 26 Jun 1999 15:40:54 -0400 From: "KSRT Contact Account" To: [email protected] Subject: KSRT 011: Accelerated-X KSRT Advisory 011 Date: June 25, 1999 ID : accelx-bo-011 Affected Program: Xi Graphics, Inc.'s Accelerated-X Server 4.x, 5.x and possibly earlier versions. Author: Jordan...
ePerl.txt
Date: Mon, 6 Jul 1998 22:39:24 -0300 From: Tiago Luz Pinto Subject: ePerl: bad handling of ISINDEX queries ePerl is an embedded Perl Interpreter for HTTP servers Description: Incorrect Handling of ISINDEX queries command line argument when ePerl runs as a nph-cgi/cgi. Cause: According with the...
Microsoft Data Access Components (MDAC) 2.1 / Microsoft IIS 3.0/4.0 / Microsoft Index Server 2.0 / Microsoft Site Server Commerce Edition 3.0 i386 MDAC - RDS (1)
source: https://www.securityfocus.com/bid/529/info MDAC Microsoft Data Access Components is a package used to integrate web and database services. It includes a component named RDS Remote Data Services. RDS allows remote access via the internet to database objects through IIS. Both are included i...
Xi Graphics Accelerated X 4.0.x5.0 - Local Buffer Overflow
Xi Graphics Accelerated X 4.0.x5.0 - Local Buffer Overflow // source: https://www.securityfocus.com/bid/488/info Accelerated-X, also known as Accel-X, is a popular commercial X server available from Xi Graphics. The servers are normally installed setuid root, and contain multiple buffer overflow...
Xi Graphics Accelerated X 4.0.x/5.0 - Local Buffer Overflow
// source: https://www.securityfocus.com/bid/488/info Accelerated-X, also known as Accel-X, is a popular commercial X server available from Xi Graphics. The servers are normally installed setuid root, and contain multiple buffer overflow vulnerabilities. These vulnerabilities were found in the...
Windows Command Shell Upgrade (Powershell)
This module executes Powershell to upgrade a Windows Shell session to a full Meterpreter session. Module Options msf use exploit/windows/local/powershell/cmdupgrade msf undefinedcmdupgrade show actions ...actions... msf undefinedcmdupgrade set ACTION msf undefinedcmdupgrade show options ...show a...
Windows Run Command As User
This module will login with the specified username/password and execute the supplied command as a hidden process. Output is not returned by default. Unless targeting a local user either set the DOMAIN, or specify a UPN user format e.g. user@domain. This uses the CreateProcessWithLogonW WinAPI...
IRIX 6.26.3 - binlpstat Local Buffer Overflow
IRIX 6.26.3 - binlpstat Local Buffer Overflow / source: https://www.securityfocus.com/bid/1529/info Certain versions of IRIX ship with a version of lpstat which is vulnerable to a buffer overflow attack. The program, lpstat, is used to check the status of the printer being used by the IRIX machin...
IRIX 6.2/6.3 - '/bin/lpstat' Local Buffer Overflow
/ source: https://www.securityfocus.com/bid/1529/info Certain versions of IRIX ship with a version of lpstat which is vulnerable to a buffer overflow attack. The program, lpstat, is used to check the status of the printer being used by the IRIX machine. The problem is in the command line parsing...
CVE-1999-1106
Buffer overflow in kppp in KDE allows local users to gain root access via a long -c accountname command line argument...
CVE-1999-0960
IRIX cdplayer allows local users to create directories in arbitrary locations via a command line option...
CVE-1999-1192
Buffer overflow in eeprom in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument...
CVE-1999-0962
Buffer overflow in HPUX passwd command allows local users to gain root privileges via a command line option...
IRIX 6.5.x - usrsbingr_osview Local Buffer Overflow
IRIX 6.5.x - usrsbingrosview Local Buffer Overflow / source: https://www.securityfocus.com/bid/1526/info Under certain versions of IRIX, the 'grosview' command contains a buffer overflow that local attackers can exploit to gain root privileges. The grosview command produces a graphical display of...
CVE-1999-1309
Sendmail before 8.6.7 allows local users to gain root access via a large value in the debug -d command line option...
CVE-1999-1438
Vulnerability in /bin/mail in SunOS 4.1.1 and earlier allows local users to gain root privileges via certain command line arguments...
Inktomi Traffic Server traffic_manager local overflow.
Advisory ID Internal CORE-220620 Bugtraq ID: 5098 CVE Name: CVE-2002-1013 Title: Inktomi Traffic Server trafficmanager local overflow. Class: Boundary error condition buffer overflow Remotely Exploitable: NO Locally Exploitable: Yes Vendors contacted: Inktomi Corporation INKT . Inital email sent:...
Microsoft Support
None None...