[SECURITY] [DSA 748-1] New ruby1.8 packages fix arbitrary command execution

------------------------------------------------------------------------ Debian Security Advisory DSA 748-1 [email protected] http://www.debian.org/security/ Michael Stone July 10, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[SECURITY] [DSA 735-2] New sudo packages fix pathname validation race

------------------------------------------------------------------------ Debian Security Advisory DSA 735-2 [email protected] http://www.debian.org/security/ Michael Stone July 07, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

AnalogX SimpleServer:WWW <= 1.05 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================== AnalogX SimpleServer:WWW Prepare to start connect.\n"; sleep1; $s = IO::Socket::INET-newProto="tcp", PeerAddr=$ARGV0, PeerPort=$ARGV1, Timeout=6 or die " Target web server already DoSeD ?...

Moderate: Red Hat Security Advisory: gedit security update

An updated gedit package that fixes a file name format string vulnerability is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team gEdit is a small text editor designed specifically for the GNOME GUI desktop. A file name format string...

AIX 5.1 Bellmail Local Race Condition Exploit (Instructions w/ Exploit)

Exploit for aix platform in category local exploits ======================================================================= AIX 5.1 Bellmail Local Race Condition Exploit Instructions w/ Exploit ======================================================================= -bash-2.05b$ -bash-2.05b$ cat...

Vulnerability in core server (CVE-2005-1409)

Public EXECUTE access is given to certain character conversion functions that are not designed to be safe against malicious arguments. This can cause at least a denial of service. A valid login is required to exploit this vulnerability.Note! See the announcement for special upgrade instructions...

Vulnerability in contrib module (CVE-2005-1410)

The tsearch2 contrib module declares several functions as internal even though they don't take an internal argument. This allows attackers to cause a denial of service and may possibly have other impacts. A valid login is required to exploit this vulnerability.Note! See the announcement for speci...

CVS

New CVS packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0753 Here are the details from t...

[SECURITY] [DSA 709-1] New libexif packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 709-1 [email protected] http://www.debian.org/security/ Martin Schulze April 15th, 2005 http://www.debian.org/security/faq -...

Sumus 0.2.2 - HTTPd Remote Buffer Overflow

Sumus 0.2.2 - HTTPd Remote Buffer Overflow / sumusv0.2.2: httpd remote buffer overflow exploit. by: vade79/v9 [email protected] fakehalo/realhalo compile: gcc xsumus.c -o xsumus syntax: ./xsumus -pscrln -h host sumus homepage/url: http://sumus.sourceforge.net Mus is a Spanish cards game played by 4...

S9Y Serendipity 0.8beta4 - exit.php SQL Injection

S9Y Serendipity 0.8beta4 - exit.php SQL Injection !/usr/bin/perl Serendipity 0.8beta4 exit.php SQL Injection exploit c ADZ Security Team 2004-2005 c kreon 2005 http://adz.void.ru/ [email protected] Public : print "\n\n"; print " Serendipity 0.8beta4 exit.php SQL Injection exploit\n"; print " C ADZ...

[Full-disclosure] rsnapshot Security Advisory 001

============================================================================ rsnapshot Security Advisory 001 [email protected] http://www.rsnapshot.org/security/ Apr 10th, 2005 Nathan Rosenquist ============================================================================ Severity: high...

[SECURITY] [DSA 699-1] New netkit-telnet-ssl packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 699-1 [email protected] http://www.debian.org/security/ Martin Schulze March 29th, 2005 http://www.debian.org/security/faq -...

GLSA-200503-31 : Mozilla Firefox: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200503-31 Mozilla Firefox: Multiple vulnerabilities The following vulnerabilities were found and fixed in Mozilla Firefox: Mark Dowd from ISS X-Force reported an exploitable heap overrun in the GIF processing of obsolete Netscape...

getr00t.sh

!/usr/bin/sh r00t exploit written for the invscout bug reported by Idefense labs http://www.idefense.com/application/poi/display?id=171&type=vulnerabilities coded by ri0t exploitation is trivial but automated with this script www.ri0tnet.net usage ./getr00t.sh : exploitation gives euidroot from...

[SECURITY] [DSA 695-1] New xli packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 695-1 [email protected] http://www.debian.org/security/ Martin Schulze March 21st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 691-1] New abuse packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 691-1 [email protected] http://www.debian.org/security/ Martin Schulze March 7th, 2005 http://www.debian.org/security/faq -...

[Full-Disclosure] iDEFENSE Security Advisory 02.23.05: Sun Solaris kcms_configure Arbitrary File Corruption Vulnerability

Sun Solaris kcmsconfigure Arbitrary File Corruption Vulnerability iDEFENSE Security Advisory 02.23.05 www.idefense.com/application/poi/display?id=206&type=vulnerabilities February 23, 2005 I. BACKGROUND The kcmsconfigure utility is part of the Kodak Color Management System KCMS package that is...

[SECURITY] [DSA 689-1] New mod_python packages fix information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 689-1 [email protected] http://www.debian.org/security/ Martin Schulze February 23rd, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 689-1] New mod_python packages fix information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 689-1 [email protected] http://www.debian.org/security/ Martin Schulze February 23rd, 2005 http://www.debian.org/security/faq -...