1466 matches found
VMware vulnerability in NAT networking
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 VULNERABILITY SUMMARY A vulnerability has been discovered in vmnat.exe on Windows hosts and vmnet-natd on Linux systems. The vulnerability makes it possible for a malicious guest using a NAT networking configuration to execute unwanted code on the hos...
Ethereal <= 0.10.9 "3G-A11" Remote Buffer Overflow Exploit
Exploit for linux platform in category remote exploits ========================================================== Ethereal The CDMA2000 A11 protocol dissector packet-3g-a11.c has a stack overflow vulnerability when decoding Airlink records. This vulnerability was also discovered by Diego Giagio o...
iDEFENSE Security Advisory 02.21.05: Multiple Unix/Linux Vendor cURL/libcURL NTLM Authentication Buffer Overflow Vulnerability
Multiple Unix/Linux Vendor cURL/libcURL NTLM Authentication Buffer Overflow Vulnerability iDEFENSE Security Advisory 02.21.05: www.idefense.com/application/poi/display?id=202&type=vulnerabilities February 21, 2005 I. BACKGROUND cURL is a command line tool for transferring files with URL syntax,...
Knox Arkeia Server Backup 5.3.x Remote Root Exploit
Exploit for multiple platform in category remote exploits =================================================== Knox Arkeia Server Backup 5.3.x Remote Root Exploit =================================================== / Knox Arkiea Server Backup arkiead local/remote root exploit Targets for Redhat...
Speedtouch USB driver for linux format string bugs
Format string bug on syslog call...
Borland Interbase 7.x - Remote Buffer Overflow
Borland Interbase 7.x - Remote Buffer Overflow !/usr/bin/perl Priv8security com remote exploit for Borland Interbase 7.1 SP 2 and lower Public Version!!! Bug found by Aviram Jenik www.securiteam.com unixfocus 5AP0P0UCUO.html wsxz@localhost buffer$ perl priv8ibserverb.pl -h localhost -t 0 -=...
xwebTraversal10.txt
Donato Ferrante Application: xweb http://in.geocities.com/shamitbagchi Version: 1.0 Bug: directory traversal bug Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description 2. The bug 3...
Crafty Game Stack Overflow & Exploit
Copyright © Rosiello Security http://www.rosiello.org ADVISORY: http://www.rosiello.org/en/readbugs.php?18 BACKGROUND: by SecurityTracker EXPLOIT: http://www.rosiello.org/archivio/crafty.zip Impact: Execution of arbitrary code via local system, User access via local system Versions: 19.3 and prio...
problems with database files in 'SignatureDB'
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - File: LynX-adv4SignatureDB.txt Date: 15/02/2004 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - o NAME: problems with database files in...
[Full-Disclosure] Lame crash in qmail-smtpd and memory overwrite according to gdb, yet still qmail much better than windows
Georgi Guninski security advisory 65, 2004 Lame crash in qmail-smtpd and memory overwrite according to gdb, yet still qmail much better than windows Systems affected: qmail 1.03 on linux, don't know about other OSes. Risk: Unknown. maybe so, maybe no. Date: 15 January 2004 Legal Notice: This...
FAT32 directory auth bypass on Linux Abyssws < 1.2
Luigi Auriemma Application: Abyss webserver http://www.aprelium.com Versions: minors than 1.2 Platforms: Linux version only Bug: Bypassing of password protected folders authorization on FAT32 filesystems Risk: medium but rarely users use Linux to run a webserver on a FAT32 partition Exploitation:...
Real Server 7/8/9 Remote Root Exploit (Windows & Linux)
Exploit for multiple platform in category remote exploits ======================================================= Real Server 7/8/9 Remote Root Exploit Windows & Linux ======================================================= / / THCREALbad 0.4 - Wind0wZ & Linux remote root exploit / Exploit by:...
VMware Workstation 4.0.1 (for Linux systems) vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Description - ----------- The following products have a vulnerability that can allow a non-root user of the host system to delete files. VMware Workstation 4.0.1 for Linux systems build 5289 and earlier releases Details/Impact - -------------- By...
VMware GSX Server 2.5.1 / Workstation 4.0 (for Linux systems) vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Description - ----------- The following products have a vulnerability that can allow a user of the host system to start an arbitrary program with root privileges: VMware GSX Server 2.5.1 for Linux systems build 4968 and earlier releases VMware...
[Full-Disclosure] SRT2003-07-07-0913 - Abnormal suid behavior in several applications
Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...
[Full-Disclosure] SRT2003-07-07-0833 - IBM U2 UniVerse users with uvadm rights can take root via uvadmsh
Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...
VMware Workstation 4.0: Possible privilege escalation on the host via symlink manipulation
It is possible for a user to gain an esclation in privileges on a system running VMware Workstation 4.0 for Linux systems by symlink manipulation in a world-writable directory such as /tmp. Affected systems: VMware Workstation 4.0 for Linux systems Dates: This was reported to VMware on 2003-06-17...
Ifenslave 0.0.7 - Argument Local Buffer Overflow (2)
Ifenslave 0.0.7 - Argument Local Buffer Overflow 2 // source: https://www.securityfocus.com/bid/7682/info ifenslave for Linux has been reported prone to a buffer overflow vulnerability. The issue is reportedly due to a lack of sufficient bounds checking performed on user-supplied data before it i...
OpenSSH/PAM 3.6.1p1 - Remote Users Discovery Tool
/ SSHBRUTE - OpenSSH/PAM Proof of concept code by Maurizio Agazzini Tested against Red Hat, Mandrake, and Debian GNU/Linux. Reference: http://lab.mediaservice.net/advisory/2003-01-openssh.txt $ tar xvfz openssh-3.6.1p1.tar.gz $ patch -p0 include include / an illegal user / define NOUSER...
Samba < 2.2.8 (Linux/BSD) - Remote Code Execution
/ Remote root exploit for Samba 2.2.x and prior that works against Linux all distributions, FreeBSD 4.x, 5.x, NetBSD 1.x and OpenBSD 2.x, 3.x and 3.2 non-executable stack. sambal.c is able to identify samba boxes. It will send a netbios name packet to port 137. If the box responds with the mac...