EMC Legato NetWorker uses weak AUTH_UNIX authentication

Overview EMC Legato NetWorker uses weak AUTHUNIX authentication, allowing a remote attacker to execute arbitrary commands, gain elevated privileges, or cause a denial of service. Description EMC Legato NetWorker is a cross-platform backup and recovery application. It is also repackaged by Sun...

Microsoft Windows Telephony Service Buffer Overflow Vulnerability

Description Microsoft Windows Telephony Service is prone to a buffer-overflow vulnerability. This issue is due to a failure in the application to perform proper bounds checking on user-supplied data. A successful attack can result in overflowing a finite-sized buffer, ultimately leading to...

zlib -- buffer overflow vulnerability

Problem description A fixed-size buffer is used in the decompression of data streams. Due to erronous analysis performed when zlib was written, this buffer, which was belived to be sufficiently large to handle any possible input stream, is in fact too small. Impact A carefully constructed...

Mozilla Thunderbird: Multiple vulnerabilities

Background Mozilla Thunderbird is the next-generation mail client from the Mozilla project. Description The following vulnerabilities were found and fixed in Mozilla Thunderbird: "mozbugra4" and "shutdown" discovered that Thunderbird was improperly cloning base objects MFSA 2005-56. "mozbugra4"...

GLSA-200507-17 : Mozilla Thunderbird: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200507-17 Mozilla Thunderbird: Multiple vulnerabilities The following vulnerabilities were found and fixed in Mozilla Thunderbird: 'mozbugra4' and 'shutdown' discovered that Thunderbird was improperly cloning base objects MFSA...

GLSA-200507-14 : Mozilla Firefox: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200507-14 Mozilla Firefox: Multiple vulnerabilities The following vulnerabilities were found and fixed in Mozilla Firefox: 'mozbugra4' and 'shutdown' discovered that Firefox was improperly cloning base objects MFSA 2005-56. Michae...

FreeBSD : perl -- vulnerabilities in PERLIO_DEBUG handling (a5eb760a-753c-11d9-a36f-000a95bc6fae)

Kevin Finisterre discovered bugs in perl's I/O debug support : - The environmental variable PERLIODEBUG is honored even by the set-user-ID perl command usually named sperl or suidperl. As a result, a local attacker may be able to gain elevated privileges. CVE-2005-0155 - A buffer overflow may occ...

FreeBSD-SA-05:16.zlib

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:16.zlib Security Advisory The FreeBSD Project Topic: Buffer overflow in zlib Category: core Module: libz Announced: 2005-07-06 Credits: Tavis Ormandy Affects:...

zlib -- buffer overflow vulnerability

Problem Description An error in the handling of corrupt compressed data streams can result in a buffer being overflowed. Impact By carefully crafting a corrupt compressed data stream, an attacker can overwrite data structures in a zlib-using application. This may cause the application to halt,...

ldsoWhoops.txt

ld.so from Solaris 9 and 10 doesn't check LDAUDIT environment variable when running sugid binaries, allowing to run arbitrary code with elevated privileges. Well, I can't belive, that such trivial vulnerability exists in modern OS... The following PoC code was tested on: - SunOS 5.10 Generic i86p...

[Full-disclosure] Solaris 9/10 ld.so fun

ld.so from Solaris 9 and 10 doesn't check LDAUDIT environment variable when running sugid binaries, allowing to run arbitrary code with elevated privileges. Well, I can't belive, that such trivial vulnerability exists in modern OS... The following PoC code was tested on: - SunOS 5.10 Generic i86p...

[SA15827] Adobe Reader / Acrobat Two Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-1624: Adobe Reader and Adobe Acrobat updater allows folder elevated privileges

Affected product: Adobe Reader (Mac OS X). Vulnerability type: information disclosure vulnerability. The connected OpenVAS entry (Adobe Reader Information Disclosure Vulnerability, Jun 2005) lists CVE-2005-1624 among related CVEs and provides limited details (no exploitation info) with CVSS base/...

AIX 5.2 ipl_varyon Local Elevated Privileges Exploit

Exploit for aix platform in category local exploits ==================================================== AIX 5.2 iplvaryon Local Elevated Privileges Exploit ==================================================== / IBM AIX iplvaryon elevated privileges exploit I just wanted to play with PowerPC Test...

AIX 5.2 netpmon Local Elevated Privileges Exploit

Exploit for aix platform in category local exploits ================================================= AIX 5.2 netpmon Local Elevated Privileges Exploit ================================================= / IBM AIX netpmon elevated privileges exploit I just wanted to play with PowerPC Tested on 5.2...

Multiple Qualcomm qpopper POP3 server vulnerabilities

Elevated privileges are not dropped during file access, directory traversal...

firefox security update

CentOS Errata and Security Advisory CESA-2005:434 Updated firefox packages that fix various security bugs are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several bugs were found...

Important: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix various security bugs are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several bugs were found in the way Firefox executes javascript code...

Mandrake Linux Security Advisory : cdrdao (MDKSA-2005:089)

The cdrdao package contains two vulnerabilities; the first allows local users to read arbitrary files via the show-data command and the second allows local users to overwrite arbitrary files via a symlink attack on the /.cdrdao configuration file. This can also lead to elevated privileges a root...

Apple Mac OS X Foundation Framework vulnerable to buffer overflow via incorrect handling of an environmental variable

Overview A buffer overflow in Mac OS X Foundation Framework's processing of environment variables may lead to elevated privileges. Description A vulnerability is present Mac OS X Foundation Framework shipped in version 10.3.9 of Mac OS X and Mac OSX Server. There is a flaw in the handling of...