Solaris 789 (SPARC) - dtprintinfo Local Privilege Escalation (1)

Solaris 789 SPARC - dtprintinfo Local Privilege Escalation 1 / raptordtprintnamesparc.c - dtprintinfo 0day, Solaris/SPARC Copyright c 2004-2019 Marco Ivaldi 0day buffer overflow in the dtprintinfo1 CDE Print Viewer, leading to local root. Many thanks to Dave Aitel for discovering this vulnerabili...

Dave Aitel on the Sony Hack

Dennis Fisher talks with Dave Aitel of Immunity about the Sony hack, who he believes is responsible for it, what the consequences are and what the attack could mean for the way the U.S. government and private companies think about security in the future. Download: digitalunderground175.mp3 Music ...

Dave Aitel Discusses Hacking Groups' Agendas

It has come to this: CNN is now running segments on the attacks attributed to LulzSec, Anonymous and other groups and the FBI raids on suspected members of those crews. The network had Dave Aitel of Immunity Inc. on this morning to discuss the effects of the recent arrests and what the groups’...

Dave Aitel, Immunity

Dave is one of the four or five smartest people I’ve ever interviewed, and not just on matters related to security or technology in general. His posts on the Daily Dave mailing list are always thoughtful and often funny and he has a knack for explaining insanely complex exploitation techniques,...

The All-Decade Interview Team

It occurred to me recently that I’ve been covering the security industry for just about 10 years. That’s a long time to be doing anything, and especially to be writing about one topic. But it’s hard to think of something that would have been much more interesting to cover this decade, given the...

sastcpd 8.0 'authprog' local root vulnerability

Hi, Several environment variable problems exist in the 'SAS Job Spawner for Open Systems version 8.00'. No other releases of the software were available to test. Sorry. authprog vulnerability ---------------------- The daemon passes a user-defined environment variable, 'authprog', to execve. This...