Low: Red Hat Security Advisory: slocate security update

An updated slocate package that fixes a denial of service issue is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Slocate is a security-enhanced version of locate. Like locate, slocate searches through a nightly-updated central...

[Full-disclosure] Operator Shell (osh) Stack-based Buffer Overflow

!/usr/bin/perl OSH 1.7 Exploit 2 Gonna bang away at this until it's removed ;- EDUCATIONAL purposes only.... :- by Charles Stevenson core [email protected] Description: The Operator Shell Osh is a setuid root, security enhanced, restricted shell. It allows the administrator to carefully limit the...

x_osh2.pl.txt

!/usr/bin/perl OSH 1.7 Exploit 2 Gonna bang away at this until it's removed ;- EDUCATIONAL purposes only.... :- by Charles Stevenson core Description: The Operator Shell Osh is a setuid root, security enhanced, restricted shell. It allows the administrator to carefully limit the access of special...

Operator Shell (osh) 1.7-13 Local Root Exploit

No description provided by source. You must be groupoperator for permissions /str0ke !/usr/bin/perl OSH 1.7 Exploit 2 Gonna bang away at this until it's removed ;- EDUCATIONAL purposes only.... :- by Charles Stevenson core [email protected] Description: The Operator Shell Osh is a setuid root,...

Operator Shell (osh) 1.7-13 - Local Privilege Escalation

You must be groupoperator for permissions /str0ke !/usr/bin/perl OSH 1.7 Exploit 2 Gonna bang away at this until it's removed ;- EDUCATIONAL purposes only.... :- by Charles Stevenson core Description: The Operator Shell Osh is a setuid root, security enhanced, restricted shell. It allows the...

Operator Shell (osh) 1.7-13 - Local Privilege Escalation

Operator Shell osh 1.7-13 - Local Privilege Escalation You must be groupoperator for permissions /str0ke !/usr/bin/perl OSH 1.7 Exploit 2 Gonna bang away at this until it's removed ;- EDUCATIONAL purposes only.... :- by Charles Stevenson core Description: The Operator Shell Osh is a setuid root,...

Microsoft Internet Explorer XML Redirect Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to an information disclosure vulnerability. Specifically, it may be possible for remote users to read XML data from an affected computer via a malicious Web page. This issue is a variant of BID 5560. This variant was not addressed with the release ...

security flaw

Multiple unknown vulnerabilities in the 1 KINK, 2 L2TP, 3 MGCP, 4 EIGRP, 5 DLSw, 6 MEGACO, 7 LMP, and 8 RSVP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service infinite loop...

CVE-2005-0803

The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service application crash via a crafted Enhanced Metafile EMF file that causes invalid 1 end, 2 emreof, or 3 palent offsets to be used, aka "Enhanced Metafile Vulnerability."...

CVE-2005-0803

CVE-2005-0803 is an EMF/WMF rendering vulnerability in Windows. The Enhanced Metafile rendering API in GDI32.DLL can crash or be exploited remotely when a specially crafted EMF/WMF file is processed, due to an unchecked buffer/invalid offsets (end, emreof, palent). Affects Windows 2000, Windows X...

CVE-2005-0803

The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service application crash via a crafted Enhanced Metafile EMF file that causes invalid 1 end, 2 emreof, or 3 palent offsets to be used, aka "Enhanced Metafile Vulnerability."...

CVE-2004-2708

Gyach Enhanced Gyach-E before 1.0.0 stores passwords in plaintext, which allows attackers to obtain user passwords by reading the configuration file...

CVE-2004-2707

Multiple unspecified vulnerabilities in Gyach Enhanced Gyach-E before 1.0.5 have unknown impact and attack vectors related to "several security flaws," probably related to buffer overflows in HTTP server responses...

CVE-2004-2710

Multiple buffer overflows in Gyach Enhanced Gyach-E before 1.0.3 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to 1 sending certain typing statuses or 2 setting the chat room status bar to the current chat room name...

CVE-2004-2711

Multiple buffer overflows in Gyach Enhanced Gyach-E before 1.0.2 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to "avatar retrieval."...

CVE-2004-2706

Unspecified vulnerability in Gyach Enhanced Gyach-E before 1.0.4 allows remote attackers to cause a denial of service crash via conference packets with error messages...

CVE-2004-2709

Buffer overflow in the striphtmltags method for Gyach Enhanced Gyach-E before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown vectors involving HTML tags...

CVE-2004-2712

Buffer overflow in Gyach Enhanced Gyach-E before 1.0.0-SneakPeek-3 allows remote attackers to cause a denial of service crash via unspecified vectors related to "URL data."...

Hydra: SOCKS5

This plugin runs Hydra to find SOCKS5 accounts and passwords by brute force. To use this plugin, enter the 'Logins file' and the 'Passwords file' under the 'Hydra NASL wrappers options' advanced settings block. TRUSTED...

CVE-2004-0209

Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via 1 Windows Metafile WMF or 2 Enhanced Metafile EMF image formats that involve "an unchecked buffer."...