SuSE 6.x/7.0 - MkDir Error Handling rctab Race Condition (2)

source: https://www.securityfocus.com/bid/2207/info rctab is the Run Control Tab script included with the SuSE distribution of the Linux Operating System. SuSE is a freely available, Open Source Operating system maintained by SuSE Incorporated. A race condition in the rctab script could allow an...

GTK+ 1.2.8 - Arbitrary Loadable Module Execution

GTK+ 1.2.8 - Arbitrary Loadable Module Execution // source: https://www.securityfocus.com/bid/2165/info GTK+ is the Gimp Toolkit, freely available to the public and maintained by the GTK Development Team. A problem exists in the Gimp Toolkit that could allow a user elevated privileges. The proble...

GTK+ 1.2.8 - Arbitrary Loadable Module Execution

// source: https://www.securityfocus.com/bid/2165/info GTK+ is the Gimp Toolkit, freely available to the public and maintained by the GTK Development Team. A problem exists in the Gimp Toolkit that could allow a user elevated privileges. The problem occurs in the ability to load modules with the...

Solaris 2.5.1/2.6/7.0/8 - patchadd Race Condition

source: https://www.securityfocus.com/bid/2127/info patchadd is the patch management tool included with the Solaris Operating Environment, distributed by Sun Microsystems. A problem exists which could allow a user to corrupt or append system files. The problem exists in the creation of /tmp files...

IBM AIX 4.3.x - '/usr/lib/lpd/piobe' Local Buffer Overflow

/ source: https://www.securityfocus.com/bid/2037/info AIX is a variant of the UNIX Operating System, distributed by IBM. A problem exists which can allow a local user elevated priviledges. The problem exists in the piobe program. Due to the insuffient handling of the PIOSTATUSFILE, PIOTITLE, and...

IBM AIX 4.x - usrbinsetsenv Local Buffer Overflow

IBM AIX 4.x - usrbinsetsenv Local Buffer Overflow / source: https://www.securityfocus.com/bid/2032/info AIX is a version of the UNIX Operating System distributed by IBM. A problem exists that could allow a user elevated priviledges. The problem occurs in the setsenv binary. It has been reported...

IBM AIX 4.3.x - usrliblpdpiobe Local Buffer Overflow

IBM AIX 4.3.x - usrliblpdpiobe Local Buffer Overflow / source: https://www.securityfocus.com/bid/2037/info AIX is a variant of the UNIX Operating System, distributed by IBM. A problem exists which can allow a local user elevated priviledges. The problem exists in the piobe program. Due to the...

BSDi SUIDPerl - Local Stack Buffer Overflow

BSDi SUIDPerl - Local Stack Buffer Overflow / BSDisuidperl buffer overflow, by [email protected]. this is that old buffer overflow in suidperl, but i never saw any version of it for BSDi. so, here it is. this gives euid=0. BSDi/3.0 / define PATH "/usr/bin/suidperl" / path to suidperl on BSDi/3.0....

BSDi SUIDPerl - Local Stack Buffer Overflow

/ BSDisuidperl buffer overflow, by [email protected]. this is that old buffer overflow in suidperl, but i never saw any version of it for BSDi. so, here it is. this gives euid=0. BSDi/3.0 / define PATH "/usr/bin/suidperl" / path to suidperl on BSDi/3.0. / define DEFAULTOFFSET -5000 / general...

Oracle (oidldapd connect) Local Command Line Overflow Exploit

Exploit for linux platform in category local exploits ============================================================= Oracle oidldapd connect Local Command Line Overflow Exploit ============================================================= / Exploit Code for oidldapd in Oracle 8.1.6 8ir2 for Linux....

RedHat 0.4 b15 restore - Insecure Environment Variables

RedHat 0.4 b15 restore - Insecure Environment Variables source: https://www.securityfocus.com/bid/1914/info restore is a program for backup and recovery procedures, distributed with the RedHat Linux Operating System. A vulnerability exists that could allow a user elevated permissions. The problem...

RedHat 0.4 b15 restore - Insecure Environment Variables

source: https://www.securityfocus.com/bid/1914/info restore is a program for backup and recovery procedures, distributed with the RedHat Linux Operating System. A vulnerability exists that could allow a user elevated permissions. The problem occurs in the RSH environment variable. restore is...

Denial of Service attack against computers running Microsoft NetMeeting

Diversified Software Industries, Inc. www.dsi-inc.net/dsi Security Advisory October 16, 2000 Denial of Service attack against computers running Microsoft NetMeeting 1. Description 2. Steps to reproduce exploit 3. Vendor status and solution 4. Disclaimer 5. Credits 6. About DSI...

[NEWS] Vulnerability in CamShot server (Authorization)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com Vulnerability in CamShot server Authorization ---------------------------------------------------------------------------- SUMMARY CamShot is a web server...

[SECURITY] new version of screen released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Michael Stone September 2, 2000 - ------------------------------------------------------------------------ Package: screen Vulnerability: local...

Уязвимость в NT - относительнный путь к оболочке пользователя.

По-умлочанию explorer.exe ищется в корневой директории системного раздела, что позволяет подменить его и таким образом запустить приложение с правами другого пользователя...

Solaris 2.52.67.08 ufsrestore - Local Buffer Overflow

Solaris 2.52.67.08 ufsrestore - Local Buffer Overflow // source: https://www.securityfocus.com/bid/1348/info Solaris is a version of the UNIX Operating System distributed by Sun Microsystems. Solaris ships with a filesystem utility called ufsrestore that is used for archive/backup retrieval. A...

Solaris 2.5/2.6/7.0/8 ufsrestore - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/1348/info Solaris is a version of the UNIX Operating System distributed by Sun Microsystems. Solaris ships with a filesystem utility called ufsrestore that is used for archive/backup retrieval. A problem with the utility could allow a local user to gai...

Corel Linux OS 1.0 - Dosemu Distribution Configuration

source: https://www.securityfocus.com/bid/1030/info A vulnerability exists in the configuration of Dosemu, the DOS emulator, as shipped with Corel Linux 1.0. Dosemu documentation cautions that the system.com binary should not be made available to users, as it implements the system libc call. User...

RedHat 6.1 IRIX 6.5.18 - lpd Command Execution

RedHat 6.1 IRIX 6.5.18 - lpd Command Execution source: https://www.securityfocus.com/bid/927/info Multiple vulnerabilities have been discovered in lpd, shipped with various Linux and Unix distributions. It has been reported that lpd fails to properly authenticate hostnames. This could allow an...