98 matches found
Cisco AnyConnect 3.1.08009 - Local Privilege Escalation (via DMG Install Script)
Cisco AnyConnect 3.1.08009 - Local Privilege Escalation via DMG Install Script / Cisco AnyConnect elevation of privileges via DMG install script - proof of concept Yorick Koster, July 2015 https://securify.nl/advisory/SFY20150701/ciscoanyconnectelevationofprivilegesviadmginstallscript.html based ...
CVE-2014-4430
CoreStorage in Apple OS X before 10.10 retains a volume's encryption keys upon an eject action in the unlocked state, which makes it easier for physically proximate attackers to obtain cleartext data via a remount...
SGI IRIX <= 6.2 eject Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/351/info A vulnerability exists in the eject program shipped with Irix 6.2 from Silicon Graphics. By supplying a long argument to the eject program, it is possible to overwrite the return address on the stack, and execute...
SGI IRIX <= 6.2 eject Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/351/info A vulnerability exists in the eject program shipped with Irix 6.2 from Silicon Graphics. By supplying a long argument to the eject program, it is possible to overwrite the return address on the stack, and execute...
Slackware: Security Advisory (SSA:2006-142-02)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2011-4552
Multiple cross-site scripting XSS vulnerabilities in One Click Orgs before 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the description field of 1 a new vote or 2 the eject member proposal feature...
CVE-2011-4552
Multiple cross-site scripting XSS vulnerabilities in One Click Orgs before 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the description field of 1 a new vote or 2 the eject member proposal feature...
CVE-2011-4552: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in One Click Orgs before 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the description field of 1 a new vote or 2 the eject member proposal feature...
PT-2011-4983
Name of the Vulnerable Software and Affected Versions One Click Orgs versions prior to 1.2.3 Description The issue allows remote attackers to inject arbitrary web script or HTML via the description field of a new vote or the eject member proposal feature, potentially leading to cross-site scripti...
Mandriva Update for eject MDVA-2010:071 (eject)
Check for the Version of eject OpenVAS Vulnerability Test Mandriva Update for eject MDVA-2010:071 eject Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
MDVA-2010:071 : eject
The eject package shipped in Mandriva Linux 2009.0, 2009.1, 2010.0 contains a bug which will lead to a failure when ejecting a DVD which has space characters within its name. The updated package fixes this problem. Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers...
linux/x86 eject /dev/cdrom 42 bytes
No description provided by source. ; linux/x86 eject /dev/cdrom 42 bytes ; root@thegibson ; 2010-01-08 section .text global start start: ; open"/dev/cdrom", ORDONLY | ONONBLOCK; mov al, 5 cdq push edx push word 0x6d6f push dword 0x7264632f push dword 0x7665642f mov ebx, esp mov cx, 0xfff sub cx,...
linux/x86 eject /dev/cdrom 42 bytes
linux/x86 eject /dev/cdrom 42 bytes. Shellcode exploit for linx86 platform ; linux/x86 eject /dev/cdrom 42 bytes ; root@thegibson ; 2010-01-08 section .text global start start: ; open"/dev/cdrom", ORDONLY | ONONBLOCK; mov al, 5 cdq push edx push word 0x6d6f push dword 0x7264632f push dword...
CVE-2003-1399
CVE-2003-1399 relates to eject 2.0.10 installed with setuid on systems like SuSE Linux 7.3. The issue is that error messages vary depending on whether a specific file exists, enabling local users to obtain sensitive information. The consolidated documents confirm the vulnerable component (eject 2...
CVE-2003-1399: Undefined Security Weakness
eject 2.0.10, when installed setuid on systems such as SuSE Linux 7.3, generates different error messages depending on whether a specified file exists or not, which allows local users to obtain sensitive information...
FreeBSD eject buffer overflow
Buffer overflow in -t option...
FreeBSD mcweject 0.9 Eject - Local Buffer Overflow Local Privilege Escalation
FreeBSD mcweject 0.9 Eject - Local Buffer Overflow Local Privilege Escalation // ejecsploit.c - local root exploit for bsd's eject.c // harry // vuln found by kokanin you 31337!!! ; // thanks to sacrine and all the other netric guys!!! you rule : include include include include define LEN 1264...
FreeBSD mcweject 0.9 (eject) Local Root Buffer Overflow Exploit
No description provided by source. // ejecsploit.c - local root exploit for bsd's eject.c // harry // vuln found by kokanin you 31337!!! ; // thanks to sacrine and all the other netric guys!!! you rule : include stdio.h include stdlib.h include string.h include unistd.h define LEN 1264 define NOP...
FreeBSD mcweject 0.9 'Eject' - Local Buffer Overflow / Local Privilege Escalation
// ejecsploit.c - local root exploit for bsd's eject.c // harry // vuln found by kokanin you 31337!!! ; // thanks to sacrine and all the other netric guys!!! you rule : include include include include define LEN 1264 define NOP 0x90 extern char environ; int main char bufLEN; char ptr; char arg4;...
[slackware-security] zoo archiver overflow
New bin packages are available for Slackware 10.2 and -current to fix a security issue with the zoo archive program. A non-security- related upgrade to the newest version of "eject" was also done. Here are the details from the Slackware 10.2 ChangeLog: patches/packages/bin-10.2-i486-210.2.tgz:...