Mozilla SeaMonkey: Multiple vulnerabilities

Background The Mozilla SeaMonkey project is a community effort to deliver production-quality releases of code derived from the application formerly known as "Mozilla Application Suite". Description The following vulnerabilities have been reported: Benjamin Smedberg discovered that chrome URL's...

[Full-disclosure] Solaris 9/10 ld.so fun

ld.so from Solaris 9 and 10 doesn't check LDAUDIT environment variable when running sugid binaries, allowing to run arbitrary code with elevated privileges. Well, I can't belive, that such trivial vulnerability exists in modern OS... The following PoC code was tested on: - SunOS 5.10 Generic i86p...

CVE-2003-0909

Windows XP allows local users to execute arbitrary programs by creating a task at an elevated privilege level through the eventtriggers.exe command-line tool or the Task Scheduler service, aka "Windows Management Vulnerability."...

CVE-2003-0909

Windows XP allows local users to execute arbitrary programs by creating a task at an elevated privilege level through the eventtriggers.exe command-line tool or the Task Scheduler service, aka "Windows Management Vulnerability."...

CVE-2001-0033

CVE-2001-0033 affects KTH Kerberos IV. Local users can alter a Kerberos server’s configuration by supplying an alternate directory via the KRBCONFDIR environmental variable, enabling escalation of privileges. The description identifies the root cause as the ability to specify a custom configurati...

Watchguard Firewall Elevated Privilege Vulnerability

I have found that the embedded Linux-based Watchguard Firebox II Firewall product range is vulnerable to read-write access using only a read-only passphrase. This gives a read-only user the ability to make changes to the firewall remotely without either authorization or a read-write passphrase. T...