4791 matches found
Linux kernel ELF core dump privilege elevation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, since it became clear from the discussion in January about the uselib vulnerability, that the Linux community prefers full, non-embargoed disclosure of kernel bugs, I release full details right now. However to follows at least some of the...
Linux Kernel 2.2.x/2.3.x/2.4.x/2.5.x/2.6.x - ELF Core Dump Local Buffer Overflow (PoC)
/ source: https://www.securityfocus.com/bid/13589/info The Linux kernel is susceptible to a local buffer-overflow vulnerability when attempting to create ELF coredumps. This issue is due to an integer-overflow flaw that results in a kernel buffer overflow during a 'copyfromuser' call. To exploit...
CVE-2005-0824
The internaldump function in Mathopd before 1.5p5, and 1.6x before 1.6b6 BETA, when Mathopd is running with the -n option, allows local users to overwrite arbitrary files via a symlink attack on dump files that are triggered by a SIGWINCH signal...
CVE-1999-1574
CVE-1999-1574 concerns a buffer overflow in the lex routines of nslookup on AIX 4.3, which can cause a core dump and potentially allow arbitrary code execution via long input strings. Affected component: nslookup (AIX 4.3). Exploitation details are not explicitly described in the provided documen...
CVE-1999-1574: Undefined Security Weakness
Buffer overflow in the lex routines of nslookup for AIX 4.3 may allow attackers to cause a core dump and possibly execute arbitrary code via "long input strings."...
CVE-2001-1435: Undefined Security Weakness
inetd in Compaq Tru64 UNIX 5.1 allows attackers to cause a denial of service network connection loss by causing one of the services handled by inetd to core dump during startup, which causes inetd to stop accepting connections to all of its services...
Dameware NT Utilities and MiniRemote Control <= 4.9 vulnerability
Dameware NT Utilities and MiniRemote Control = 4.9 vulnerability - 1 - Introduction DameWare NT Utilities is an enterprise system management application for Windows NT/2000/XP/2003 which provides an integrated collection of Microsoft Windows NT administration utilities incorporating a centralized...
[SA14524] Mathopd Insecure Dump File Creation Vulnerability
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Mathopd Insecure Dump File Creation Vulnerability...
PT-2005-1853 · Mathopd · Mathopd
Name of the Vulnerable Software and Affected Versions: Mathopd versions 1.5p0 through 1.5p4 Mathopd versions 1.6x before 1.6b6 BETA Description: The issue allows local users to overwrite arbitrary files via a symlink attack on dump files triggered by a SIGWINCH signal when Mathopd is running with...
Ethereal <= 0.10.9 "3G-A11" Remote Buffer Overflow Exploit
Exploit for linux platform in category remote exploits ========================================================== Ethereal The CDMA2000 A11 protocol dissector packet-3g-a11.c has a stack overflow vulnerability when decoding Airlink records. This vulnerability was also discovered by Diego Giagio o...
Ethereal 0.10.9 (Linux) - '3G-A11' Remote Buffer Overflow
/ Ethereal 0.10.9 and below proof-of-concept remote root exploit c 2005 Diego Giagio The CDMA2000 A11 protocol dissector packet-3g-a11.c has a stack overflow vulnerability when decoding Airlink records. This vulnerability was also discovered by Diego Giagio on 01/March/2005. The vendor was...
[Full-disclosure] [ZH2005-02SA] Insecure tmp file creation in Wine
Title: Insecure tmp file creation in Wine Author: Giovanni Delvecchio e-mail: [email protected] Version affected : Wine 20050211 and previous releases About Wine ======= from http://www.winehq.org/site/docs/wine-faq/index : Wine is a program which allows the operation of DOS and MS Windows...
wine -- information disclosure due to insecure temporary file handling
Due to insecure temporary file creation in the Wine Windows emulator, it is possible for any user to read potentially sensitive information from temporary registry files. When a Win32 application is launched by wine, wine makes a dump of the Windows registry in /tmp with name regxxxxyyyy.tmp ,...
Aztek Forum <= 4.0 [myadmin.php] Database Dumper Exploit
Exploit for unknown platform in category web applications ======================================================== Aztek Forum include include include include include include include include include define REQ1 "/myadmin.php?action=exportindex&login=" define REQ2 " HTTP/1.1\nHost: " define REQ3...
Aztek Forum <= 4.0 [myadmin.php] Database Dumper Exploit
No description provided by source. / Changed line 81 - Tested and working /str0ke / / LOTFREE Team presents : Forum-Aztek v4.0 4nd pr0b4bly inf3ri0r Database Dump Xpl0it 0day dUd3 X- ./aztek-sploit 127.0.0.1 admin forum HTTP/1.1 200 OK Date: Sat, 05 Mar 2005 22:18:13 GMT Server: Apache/2.0.50...
HP-UX PHKL_23423 : HP-UX Running setrlimit(1M), Denial of Service (DoS) (HPSBUX00156 SSRT071363 rev.3)
s700800 11.11 improper core dump msg : The setrlimit allows incorrect core files Rev.1 . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHKL23423. The text itself is copyright C Hewlett-Packard Development...
HP-UX PHNE_24035 : HP-UX Running rpcbind Software, Denial of Service (DoS) (HPSBUX00169 SSRT071366 rev.3)
s700800 11.11 ONC/NFS General Release/Performance Patch : Certain RPC Portmap Requests can cause rpcbind to core dump on HP-UX 11.X. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE24035. The text itself is...
CVE-2004-0960
FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service core dump via malformed USR vendor-specific attributes VSA that cause a memcpy operation with a -1 argument...
CVE-2004-0960
FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service core dump via malformed USR vendor-specific attributes VSA that cause a memcpy operation with a -1 argument...
pmc.pl.txt
| | | | | | |/ \ \ /\ / / | | | | \ V V / || ||/ // Security Group. phpMyChat remote sploit by sysbug C:\Perl\binperl pmc.pl www.kublooddrive.com /chat / Mysql dump : CDBHOST : localhost CDBNAME : jhawkpchat1 CDBUSER : jhawkpchat1 CDBPASS : vvejTjeLgB Adding Admin .... login:jhawk pwd:owned /...