Shadow Denial of Service Vulnerability

shadow is a suite of tools for maintaining Debian systems. A security vulnerability exists in versions of shadow prior to 4.5. An attacker could exploit this vulnerability with malformed input to cause the suite to crash buffer overflow or memory corruption...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The Linux-image-2.6.26-2-mckinley package from the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Hardened-PHP Project Security Advisory 2005-21.81

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened PHP Project www.hardened-php.net -= Security Advisory =- Advisory: Multiple vulnerabilities in phpSysInfo Release Date: 2005/11/13 Last Modified: 2005/11/12 Author: Christopher Kunz Application: phpSysInfo 2.4 and prior Severity: Cross-Site...

Setuid perl - PerlIO_Debug() Root Owned File Creation Privilege Escalation

Setuid perl - PerlIODebug Root Owned File Creation Privilege Escalation / Copyright Kevin Finisterre DISCLAIMER I am in no way responsible for your stupidity. DISCLAIMER I am in no way liable for any damages caused by compilation and or execution of this code. WARNING DO NOT RUN THIS UNLESS YOU...

Berlios GPSD 2.7.x - Remote Format String

Berlios GPSD 2.7.x - Remote Format String / Added , on line 75 /str0ke / / Copyright Johnh and KF 2005 Gpsd remote format string exploit By: Johnhatdigitalmunitiondotcom Bug Found By: kfatdigitalmunitiondotcom http://www.digitalmunition.com/DMA2005-0125a.txt Features: Version ident Debian machine...

[SECURITY] [DSA-364-1] New man-db packages fix buffer overflows, arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 364-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 4th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 034-1] New version of ePerl packages available

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------------- Debian Security Advisory DSA-034-1 [email protected] http://www.debian.org/security/ Martin Schulze March 7, 2001 -...

vixie cron...

Attached shell-script exploits fopen + preserved umask vulnerability in Paul Vixie's cron code. It will work on systems where /var/spool/cron is user-readable eg. 0755 - AFAIR Debian does so. RedHat at least 6.1 and previous have mode 0700 on /var/spool/cron, and thus it isn't exploitable in its...