Vulnerability discovered in SpearHead NetGap

Background --------------- SpearHead's NetGAP™ appliance physically disconnects a company's network from the Internet. The product consists of two separate computers, an Untrusted CPU and a Trusted CPU, that are never directly connected at any given time. NetGap™ includes a content checking engin...

dump 0.4b15 Local Root Exploit

Exploit for linux platform in category local exploits ============================== dump 0.4b15 Local Root Exploit ============================== !/bin/sh Redhat 6.2 dump command executes external program with suid priviledge. Discovered by Mat Written for and by a scriptkid Tasc ;P Remember,...

dump 0.4b15 - Local Privilege Escalation

!/bin/sh Redhat 6.2 dump command executes external program with suid priviledge. Discovered by Mat Written for and by a scriptkid Tasc ;P Remember, there's no cure for BSE echo "dump-0.4b15 root exploit" echo "Discovered by Mat " echo "-------------------------------------" echo DUMP=/sbin/dump i...

Solaris x86 Xsun overflow.

There exists an overflow in /usr/openwin/bin/Xsun setuid root program on solaris 7 x86 version, I'm not sure about sol 8. This bug was discovered and exploited sometime in '98. The program comes default setgid root on the sparc version of solaris. I haven't checked wether this is exploitable on...

Solaris 2.67.0 - lp -d Option Buffer Overflow

Solaris 2.67.0 - lp -d Option Buffer Overflow // source: https://www.securityfocus.com/bid/1143/info A buffer overrun has been discovered in the lp program, as included with Sun's Solaris 7 operating system. By passing well crafted, machine executable code of sufficient length to the -d option of...

netscape4x.internal.parser.txt

Jim Paris http://home.jtan.com/jim/bugs/ns/parser.html Netscape 4.x "internal/parser" bug Some versions of Netscape will simply hang when given a MIME type of internal/parser. Netscape was never designed to handle this type coming from the outside world. Versions 4.04 through the most current...