421 matches found
Discuz! 7.0-7.2 & Phpwind7. 5 Background tasteless vulnerability-vulnerability warning-the black bar safety net
| Transfer from t00ls A lot of people there, spread out, and then sent to. Now the loophole if the initiative is published, is definitely“no. do not publish”, otherwise is definitely hiding unless someone else posted. DZ tasteless that need the Creator's permission, the Creator of the password is...
TLS / SSLv3 vulnerability explained (New ways to leverage the vulnerability)
Dear List, I updated the whitepaper with a lot of new information, some leveraging the vulnerability in other ways that certainly increase the effectiveness and impact of this vulnerability. A brief warning to those that think they are safe because they don't accept client-side renegotiations...
[SECURITY] Fedora 10 Update: moodle-1.9.3-3.fc10
Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...
OpenSSH X11 < 5.1 Session Hijacking
Binary data 4598.prm...
Akamai Download Manager < 2.2.3.7 - ActiveX Remote Download
Download Manager window.resizeTo500,510; var bDocReady = false; var bInsObj = false; var isLinux = navigator.userAgent.indexOf"Linux" = 0; var isMacFF = navigator.userAgent.indexOf"Firefox" = 0 && navigator.userAgent.indexOf"Mac" = 0; var isSafari = navigator.userAgent.indexOf"Safari" = 0; var...
Linux ftpd ls privilege escalation
ls command is executed with effective gid 0...
Cross-site scripting-vulnerability warning-the black bar safety net
What is cross-site scriptingCSS/XSS? We said the cross-site scripting refers to a remote WEB page's html code is inserted with the malicious purpose of the data, the user that the The page is trustworthy, but when the browser downloads the page, the embedded script will be interpreted, Sometimes...
Multiple glftpd bugs
Directory traversal in messaging system, archive extraction, effective uid problem...
Multiple akfingerd bugs
Symbolic links, undropped egid, DoS...
CVE-2001-1509
geteuid in Itanium Architecture IA running on HP-UX 11.20 does not properly identify a user's effective user id, which could allow local users to gain privileges...
Solaris_x86_mail_exploit.txt
Greetings, A few weeks ago I posted regarding an overflow in /usr/bin/mail on Solaris 2.7. I incorrectly stated that mail drops privs before the overflow occurs. Cheez Whiz, who wrote the shellcode, saw my post on Packetstorm and supplied the following information: ...The problem with your presen...
Solaris whodo Vulnerability
Vulnerability in Solaris whodo Date Published: July 5, 2001 Advisory ID: N/A Bugtraq ID: 2935 CVE CAN: Non currently assigned. Title: Solaris whodo Buffer Overflow Vulnerability Class: Boundary Error Condition Remotely Exploitable: No Locally Exploitable: Yes Vulnerability Description: The whodo...
[SECURITY] [DSA-059-1] man-db symlink attack
Package : man-db Problem type : symlink attack Debian-specific: no Luki R. reported a bug in man-db: it did handle nested calls of dropeffectiveprivs and regaineffectiveprivs correctly which would cause it to regain privileges to early. This could be abused to make man create files as user man...
Переполнение буфера в mail из SunOS (buffer overflow)
Переполнение убфера при копировании переменной HOME дает egid mail...
SCO Open Server 5.0.6 - lpshut Buffer Overflow
source: https://www.securityfocus.com/bid/2555/info SCO OpenServer 5.0.6 and possibly earlier versions ships with several suid bin executables used in printer administration and related tasks. This includes lpshut, a component used to shut down the LP print service. 'lpshut' contains a locally...
possible rcp hole...
Here is a possible bug in rcp; since I think it calls system. I haven't had much time to play with this, because exama are coming up. It is negated because system calls /bin/cp which with the newer versions of bash, it drops it's effective credientals... $ ls -alF which rcp -rwsr-xr-x 1 root root...
OpenBSD 2.x - 'fstat' Format String
// source: https://www.securityfocus.com/bid/1746/info fstat is a program shipped with BSD unix variants that is used to list the open files on a system. It is installed sgid kmem so it can access information about open files from the kernel memory structures. A user definable environment variabl...
FreeBSD 3.3 - xmindpath Local Buffer Overflow
FreeBSD 3.3 - xmindpath Local Buffer Overflow / source: https://www.securityfocus.com/bid/839/info The version of xmindpath shipped with FreeBSD 3.3 can be locally exploited via overrunning a buffer of predefined length. It is possible to gain the effective userid of uucp through this...
Solaris 7.0 - 'Coredump' File Write
source: https://www.securityfocus.com/bid/296/info There is a vulnerability in the way Solaris 2.4 pre Jumbo Kernel Patch -35 for SPARC dumps core files. Under normal operation the operating system writes out a core image of a process when it is terminated due to the receipt of some signals. The...
