Possible local root vulnerability in Roxio Toast on Mac OS X

Possible local root vulnerability in Roxio Toast on Mac OS X By fintler [email protected] Summary: There is a format string bug in the binary /Library/Application Support/Roxio/TDIXSupport. It is installed suid root by default and may be exploited by finding the offset and overwriting the stack...

Roxio Toast format string bug

TDIXSupport suid application format string bug...

CVE-2004-1192

Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via format string specifiers sent to the server...

CVE-2004-1214

Format string vulnerability in Kreed 1.05 and earlier allows remote attackers to execute arbitrary code via format specifiers in 1 a nickname or 2 message text...

CVE-2004-1192

CVE-2004-1192 is a format-string vulnerability in Citadel/UX’s lprintf() on version 6.27 and earlier that allows remote attackers to execute arbitrary code by sending format specifiers to the server. Reported impact is complete confidentiality, integrity, and availability compromise with high sev...

CVE-2004-1214

CVE-2004-1214 describes a format string vulnerability in Kreed 1.05 and earlier. The flaw allows remote attackers to execute arbitrary code via format specifiers in either a user’s nickname or their message text. The vulnerability is identified in multiple sources (NVD/CVE databases) with a high ...

CVE-2004-1214: Undefined Security Weakness

Format string vulnerability in Kreed 1.05 and earlier allows remote attackers to execute arbitrary code via format specifiers in 1 a nickname or 2 message text...

CVE-2004-1192: Undefined Security Weakness

Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via format string specifiers sent to the server...

TipxD <= 1.1.1 Local Format String Vulnerability (not setuid)

Exploit for linux platform in category local exploits ============================================================= TipxD - SECU No System Group - http://www.nosystem.com.ar / include include define PATH "/bin/tipxd" define OBJDUMP "/usr/bin/objdump" define GREP "/usr/bin/grep" unsigned char...

TipxD &lt;= 1.1.1 Local Format String Vulnerability (not setuid)

No description provided by source. / tipxdexp.c TipxD Format String Vulnerability TipxD = 1.1.1 local exploit Proof of Concept Tested in Slackware 9.0 / 9.1 / 10.0 by CoKi [email protected] - SECU No System Group - http://www.nosystem.com.ar / include stdio.h include string.h define PATH...

TipxD 1.1.1 - Not SETUID Local Format String

TipxD 1.1.1 - Not SETUID Local Format String / tipxdexp.c TipxD Format String Vulnerability TipxD - SECU No System Group - http://www.nosystem.com.ar / include include define PATH "/bin/tipxd" define OBJDUMP "/usr/bin/objdump" define GREP "/usr/bin/grep" unsigned char shellcode= / aleph1...

Adobe Acrobat / Acrobat Reader 6.0 - '.ETD' File Parser Format String

source: https://www.securityfocus.com/bid/11934/info Adobe Acrobat/Acrobat Reader is reported prone to a remote format string vulnerability. The vulnerability is present in the ETD file parser when processing tag values. Reports indicate that the values supplied for certain tags are used as the...

Adobe Acrobat Acrobat Reader 6.0 - .ETD File Parser Format String

Adobe Acrobat Acrobat Reader 6.0 - .ETD File Parser Format String source: https://www.securityfocus.com/bid/11934/info Adobe Acrobat/Acrobat Reader is reported prone to a remote format string vulnerability. The vulnerability is present in the ETD file parser when processing tag values. Reports...

Citadel/UX format string bug

Formatr stirng bug on syslog call...

[UNIX] Citadel/UX Remote Format String

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Citadel/UX Remote Format String

Binary data 2454.prm...

Citadel/UX lprintf() Function Remote Format String

The remote host is running Citadel/UX, a messaging server for Unix. There is a format string issue in the remote version of this software. A remote attacker could use this to crash the service, or execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

CitadelUX 6.27 - Format String

CitadelUX 6.27 - Format String / citadelfsexp.c Citadel/UX v6.27 remote format string exploit Use: ./citadelfsexp -h options options: -h host or IP -t type of target system -l targets list -g syslog GOT address -r RET address coki@nosystem:/audit$ ./citadelfsexp -h localhost -t0 Citadel/UX v6.27...

Citadel/UX <= 6.27 Remote Root Format String Exploit

Exploit for linux platform in category remote exploits ==================================================== Citadel/UX options options: -h host or IP -t type of target system -l targets list -g syslog GOT address -r RET address email protected:/audit$ ./citadelfsexp -h localhost -t0 Citadel/UX...

Citadel/UX 6.27 - Format String

/ citadelfsexp.c Citadel/UX v6.27 remote format string exploit Use: ./citadelfsexp -h options options: -h host or IP -t type of target system -l targets list -g syslog GOT address -r RET address coki@nosystem:/audit$ ./citadelfsexp -h localhost -t0 Citadel/UX v6.27 remote format string exploit by...