Local Glibc Shared Library Exploit

Exploit Title: Local Glibc shared library .so exploit Date: 07.04.10 Author: Rh0 [email protected] Software Link: NA Version: Tools-Plugins" in the menue or at latest when they are activated. dlopen is used for initializing and is part of glibc. See http://linux.die.net/man/3/dlopen. It always executes...

Local Glibc Shared Library (.so) 2.11.1 - Code Execution

Local Glibc Shared Library .so 2.11.1 - Code Execution Exploit Title: Local Glibc shared library .so exploit Date: 07.04.10 Author: Rh0 [email protected] Software Link: NA Version: Tools-Plugins" in the menue or at latest when they are activated. dlopen is used for initializing and is part of glibc. Se...

Ruby DL::dlopen could open a library with tainted library name even if $SAFE > 0

DL::dlopen could open a library with tainted library name even if $SAFE 0...

Fedora Update for libHX FEDORA-2008-7976

Check for the Version of libHX OpenVAS Vulnerability Test Fedora Update for libHX FEDORA-2008-7976 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

ruby: missing "taintness" checks in dl module

The dl module in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does not check "taintness" of inputs, which allows context-dependent attackers to bypass safe levels and execute dangerous functions by accessing a library using DL.dlopen...

[SECURITY] Fedora 9 Update: libHX-1.23-1.fc9

A library for: - rbtree with key-value pair extension - deques double-ended queues Stacks LIFO / Queues FIFOs - platform independent opendir-style directory access - platform independent dlopen-style shared library access - auto-storage strings with direct access - command line option argv parser...

[SECURITY] Fedora 8 Update: libHX-1.23-1.fc8

A library for: - rbtree with key-value pair extension - deques double-ended queues Stacks LIFO / Queues FIFOs - platform independent opendir-style directory access - platform independent dlopen-style shared library access - auto-storage strings with direct access - command line option argv parser...

PHP 4.x - DLOpen Memory Disclosure (2)

// source: https://www.securityfocus.com/bid/8405/info A vulnerability has been reported to present itself in the dlopen function contained in the PHP source. The issue occurs when PHP is used in conjunction with the Apache web server. A local attacker may exploit this issue to gain unauthorized...

PHP 4.x - DLOpen Memory Disclosure (1)

// source: https://www.securityfocus.com/bid/8405/info A vulnerability has been reported to present itself in the dlopen function contained in the PHP source. The issue occurs when PHP is used in conjunction with the Apache web server. A local attacker may exploit this issue to gain unauthorized...

CVE-2003-0449

Progress Database 9.1 to 9.1D06 is affected by an input-trust flaw in library loading via dlopen. Local users can exploit this by placing malicious libraries referenced through PATH or via the -installdir parameter. Affected components include libjutil.so in_proapsv and librocket_r.so in _dbagent...

SRT2003-06-13-1009 - Progress _dbagent -installdir dlopen() issue

Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...