ESCPUtil 1.15.2 2 - Printer Name Local Buffer Overflow

source: https://www.securityfocus.com/bid/6658/info It has been reported that a buffer overflow in escputil exists. When supplied with excessively long arguments, it is possible to overwrite stack memory. escputil is reportedly installed setgid 'sys' on Mandrake Linux, so it is possible that this...

GLIBC locale - Format Strings

/ su.c by xp, modified by logikal@efnet - tested on redhat 5 - 7 / include include include include include include include include char shellcode = "\x31\xc0\x83\xc0\x17\x31\xdb\xcd\x80\xeb" "\x30\x5f\x31\xc9\x88\x4f\x17\x88\x4f\x1a" "\x8d\x5f\x10\x89\x1f\x8d\x47\x18\x89\x47"...

[RAZOR] Problems with mkstemp()

Common use of 'tmpwatch' utility and its counterparts triggers race conditions in many applications Michal Zalewski [email protected], 12/05/2002 Copyright C 2002 by Bindview Corporation 1 Scope and exposure info -------------------------- A common practice of installing 'tmpwatch' utili...

apache-linux.txt

/ LINUX X86 APACHE REMOTE EXPLOIT!!!!!!!!! This is the unpublished source for apache OpenSSL handshake exploit. We obtained this exploit by modifying a circulating apache worm, created by contem@efnet BY nebunu compile: gcc -o apache-ex apache.ex.c -lcrypto run: ./apache-ex do not use hostname! u...

SCPOnly 2.3/2.4 - SSH Environment Shell Escaping

source: https://www.securityfocus.com/bid/5526/info scponly is a freely available, open source restricted secure copy client. It is available for Unix and Linux operating systems. The default installation of scponly does not place sufficient access controls on the .ssh subdirectory. Due to this...

Advisory CA-2002-26 Buffer Overflow in CDE ToolTalk

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2002-26 Buffer Overflow in CDE ToolTalk Original release date: August 12, 2002 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Systems running CDE ToolTalk Overview The Common...

CVE-2002-0767

simpleinit on Linux systems does not close a read/write FIFO file descriptor before creating a child process, which allows the child process to cause simpleinit to execute arbitrary programs with root privileges...

E-Guest 1.1 - Server Side Include Arbitrary Command Execution

source: https://www.securityfocus.com/bid/5129/info E-Guest guest book is a freely available, open source guest book. It is designed for Unix and Linux operating systems. E-Guest does not adequately sanitize user-supplied input in guest book entries. Because of this, it is possible to pass along...

Mandrake 7/8/9 / RedHat 6.x/7 Bonobo EFSTool - Commandline Argument Buffer Overflow (1)

source: https://www.securityfocus.com/bid/5125/info Bonobo is a set of tools and CORBA interfaces included as part of the Gnome infrastructure. It is designed for use on the Linux and Unix operating systems. A boundry condition error has been discovered in the efstool program. Due to improper...

IGMP denial of service vulnerability

Topic : IGMP denial of service vulnerability Date : June 14, 2002 Credit : krishna, arun, [email protected] Site : http://www.cs.ucsb.edu/krishna/igmpdos/ Description ------------ The IGMP report suppression mechanism can be exploited for launching an insider denial of service attack against a ho...

Apache 1.x2.0.x - Chunked-Encoding Memory Corruption (1)

Apache 1.x2.0.x - Chunked-Encoding Memory Corruption 1 // source: https://www.securityfocus.com/bid/5033/info When processing requests coded with the 'Chunked Encoding' mechanism, Apache fails to properly calculate required buffer sizes. This is believed to be due to improper signed interpretatio...

My Postcards 6.0 - MagicCard.cgi Arbitrary File Disclosure

My Postcards 6.0 - MagicCard.cgi Arbitrary File Disclosure source: https://www.securityfocus.com/bid/5029/info My Postcards is a commercial available eletronic postcard system. It is available for Unix and Linux Operating Systems. The magiccard.cgi script does not properly handle some types of...

Ayman Akt IRCIT 0.3.1 - Invite Message Remote Buffer Overflow

Ayman Akt IRCIT 0.3.1 - Invite Message Remote Buffer Overflow // source: https://www.securityfocus.com/bid/4998/info IRCIT is a terminal based IRC client for Linux and Unix systems. IRCIT contains a remote buffer overflow vulnerability. When a INVITE message is received, the supplied from user da...

Slurp 1.10 - SysLog Remote Format String

source: https://www.securityfocus.com/bid/4935/info slurp is a freely available, open source NNTP client. It is designed for use on most Unix and Linux operating systems. It may be possible for a remote server to execute code on a vulnerable client. slurp offers functionality that allows the...

mcNews 1.x - File Disclosure

mcNews 1.x - File Disclosure source: https://www.securityfocus.com/bid/4770/info mcNews is a set of scripts for allowing users to post news stories on a webpage. It will run on most Linux and Unix variants as well as Microsoft Windows operating systems. mcNews does not sufficiently filter...

Blahz-DNS 0.2 - Direct Script Call Authentication Bypass

Blahz-DNS 0.2 - Direct Script Call Authentication Bypass source: https://www.securityfocus.com/bid/4618/info Blahz-DNS is a web based management tool for DNS information. It is implemented in PHP, and available for Linux systems. By directly calling scripts included with Blahz-DNS, it is possible...

SLRNPull 0.9.6 - Spool Directory Command Line Parameter Buffer Overflow

SLRNPull 0.9.6 - Spool Directory Command Line Parameter Buffer Overflow source: https://www.securityfocus.com/bid/4569/info N is a freely available, open source news reading utility. It is developed and maintained by the SLRN project, and designed for use on various operating systems. This proble...

SSH2 3.0 - Restricted Shell Escape (Command Execution)

SSH2 3.0 - Restricted Shell Escape Command Execution source: https://www.securityfocus.com/bid/4547/info SSH and derivatives is the protocol Secure Shell protocol implementation. It is available for various operating systems, although this vulnerability affects operating systems such as Unix and...

CSSearch 2.3 - Remote Command Execution

CSSearch 2.3 - Remote Command Execution source: https://www.securityfocus.com/bid/4368/info csSearch is a website search script, written in Perl. It will run on most Unix and Linux variants, as well as Microsoft operating systems. csSearch is prone to an issue which may enable an attacker to...

DCShop Beta 1.0 - Form Manipulation

DCShop Beta 1.0 - Form Manipulation source: https://www.securityfocus.com/bid/4356/info DCShop Beta is a freely available shopping cart system, written in Perl. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems. It is possible to overwrite setup files...