CVE-2013-2776: Undefined Security Weakness

sudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems without /proc or the sysctl function with the ttytickets option enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another...

CVE-2013-2777: Undefined Security Weakness

sudo before 1.7.10p5 and 1.8.x before 1.8.6p6, when the ttytickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to a session without a controlling...

PT-2013-1250

Name of the Vulnerable Software and Affected Versions sudo versions prior to 1.8.6p7 sudo versions 1.8.x prior to 1.8.6p6 sudo versions prior to 1.7.10p5 Description The issue affects the sudo package in Gentoo Linux, potentially compromising confidentiality, integrity, and availability of...

File Sharing Wizard 1.5.0 Buffer Overflow

!/usr/bin/python http://www.sharing-file.net/ File Sharing Wizard Version 1.5.0 build on 26-8-2008 controlling EAX ESP points to our buffer buffer grows if we increase our string more details on http://www.s3cur1ty.de have fun m1k3 at m1k3 dot at import socket import sys if lensys.argv " sys.exit...

File Sharing Wizard v1.5.0 Buffer Overflow PoC

Exploit for windows platform in category dos / poc ============================================== File Sharing Wizard v1.5.0 Buffer Overflow PoC ============================================== !/usr/bin/python http://www.sharing-file.net/ File Sharing Wizard Version 1.5.0 build on 26-8-2008...

File Sharing Wizard 1.5.0 - Buffer Overflow (PoC)

File Sharing Wizard 1.5.0 - Buffer Overflow PoC !/usr/bin/python http://www.sharing-file.net/ File Sharing Wizard Version 1.5.0 build on 26-8-2008 controlling EAX ESP points to our buffer buffer grows if we increase our string more details on http://www.s3cur1ty.de have fun m1k3 at m1k3 dot at...

Blocking and Allowing Cookies

You can then evaluate the originating site, whether you wish to accept or deny the cookie, and what action to take allow or block, with the option to remember the decision for all future cookies from that web site. For example, if visiting a web site causes a cookie prompt from a web domain that ...

Unfixed XSS vulnerability at controlling-authority.net

Security researcher BackDoor, has submitted on 02/03/2008 a cross-site-scripting XSS vulnerability affecting controlling-authority.net, which at the time of submission ranked 4595423 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. I...

[SECURITY] Fedora 8 Update: tog-pegasus-2.6.1-3.fc8

OpenPegasus WBEM Services for Linux enables management solutions that deliv er increased control of enterprise resources. WBEM is a platform and resource independent DMTF standard that defines a common information model and communication protocol for monitoring and controlling resources from...

PHP 5.2.0 (Windows x86) - 'PHP_win32sti' Local Buffer Overflow

// x Risk: Local Buffer Overflow Medium - High Risk // x Notes: EDX and EIP are able to be controlled and therefore // have the potential to dictate program flow. // // x "Sangre, sonando, de rabia naci.. Who do you trust?" // //...

security flaw

initdev in ttyio.c in the Red Hat backport of NPTL to Red Hat Enterprise Linux 3 does not properly clear controlling tty's in multi-threaded applications, which allows local users to cause a denial of service crash and possibly gain tty access via unknown attack vectors that trigger an access of ...