GnomeHack - Local Buffer Overflow

/ gnomehack local buffer overflow. gid=games60 Author: Cody Tubbs loophole of hhp. www.hhp-programming.net / [email protected] 12/17/2000 Tested on Debian 2.2, kernel 2.2.17 - x86. sgid "games"60 by default. bash-2.03$ id uid=1000loophole gid=501noc bash-2.03$ ./h 0 0 Ret-addr 0x7fffe81c, offset...

IBM AIX 4.3 - '/usr/lib/lpd/digest' Local Buffer Overflow

/ source: https://www.securityfocus.com/bid/2033/info AIX is a version of the UNIX Operating System distributed by IBM. A vulnerability exists in the operating system which could allow a user an elevation in priviledge. The problem occurs in the digest binary. It is reported that it is possible t...

IBM AIX 4.3.x - '/usr/lib/lpd/piobe' Local Buffer Overflow

/ source: https://www.securityfocus.com/bid/2037/info AIX is a variant of the UNIX Operating System, distributed by IBM. A problem exists which can allow a local user elevated priviledges. The problem exists in the piobe program. Due to the insuffient handling of the PIOSTATUSFILE, PIOTITLE, and...

[SECURITY] New version of modutils released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Martin Schulze November 22, 2000 - ------------------------------------------------------------------------ Package : modutils Problem type : local...

HP-UX 11.0 - pppd Local Stack Buffer Overflow

HP-UX 11.0 - pppd Local Stack Buffer Overflow / Copyright c 2000 ADM / / All Rights Reserved / / THIS IS UNPUBLISHED PROPRIETARY SOURCE CODE OF ADM / / The copyright notice above does not evidence any / / actual or intended publication of such source code. / / / / Title: HP-UX pppd / / Tested...

xsplumber - strcpy() Local Buffer Overflow

xsplumber - strcpy Local Buffer Overflow / linuxsplumberversion2 buffer overflow, by [email protected]. this is a misc. exploit for the linux-SVGAlib space plumber game. which, as you know needs to be installed setuid root. this overflow is due to a simple oversight in the command line parser. us...

GnomeHack 1.0.5 - Local Buffer Overflow

GnomeHack 1.0.5 - Local Buffer Overflow / linux/debiangnomehackv1.0.5 buffer overflow, by: [email protected]. this will give you an egid=60games shell if gnomehack is sgid=2755 games on debian/2.2, which has gnomehack. this can also be applied to nethack syntax: ./debgnomehack offset alignment...

GnomeHack 1.0.5 Local Buffer Overflow Exploit

Exploit for linux platform in category local exploits ============================================= GnomeHack 1.0.5 Local Buffer Overflow Exploit ============================================= / linux/debiangnomehackv1.0.5 buffer overflow, by: v9email protected. this will give you an egid=60games...

Security Advisory - ntop local buffer overflow vulnerability (fwd)

Subject : ntop local buffer overflow vulnerability Author : Christophe BAILLEUX [email protected] Plateforms : nix Test version : ntop 1.1, ntop 1.2.a7, ntop 1.3.1, ntop 1.3.2 I. Problem All ntop versions are vulnerabled to local buffer overflow attack in there -i options. Ntop must be owned by root...

AIX 4.2/4.3 - '/usr/lib/lpd/pio/etc/piomkapqd' Local Buffer Overflow

// source: https://www.securityfocus.com/bid/3238/info // // The 'piomkapqd' utility is a component of the AIX printing subsystem. By default, it is installed setgid and owned by the 'printk' group. // // 'piomkapqd' contains a locally exploitable stack overrun condition in it's handling of comma...

AIX 4.24.3 - usrliblpdpioetcpiomkapqd Local Buffer Overflow

AIX 4.24.3 - usrliblpdpioetcpiomkapqd Local Buffer Overflow // source: https://www.securityfocus.com/bid/3238/info // // The 'piomkapqd' utility is a component of the AIX printing subsystem. By default, it is installed setgid and owned by the 'printk' group. // // 'piomkapqd' contains a locally...

Solaris 2.5/2.6/7.0/8 ufsrestore - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/1348/info Solaris is a version of the UNIX Operating System distributed by Sun Microsystems. Solaris ships with a filesystem utility called ufsrestore that is used for archive/backup retrieval. A problem with the utility could allow a local user to gai...

BSD 'mailx' 8.1.1-10 - Local Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/1305/info Some Linux distributions ship with BSD mailx 8.1.1-10 On Slackware 7.x it can be found as /usr/bin/Mail. A vulnerability exists in the 'mail' program, part of the Berkeley mailx package. The 'mail' program contains a buffer overflow condition...

Mandriva Linux Mandrake 7.0 - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/1265/info The linux cdrecorder binary is vulnerable to a locally exploitable buffer overflow attack. When installed in a Mandrake 7.0 linux distribution, it is by default setgid "cdburner" which is a group, gid: 80, that is created for the application...

SuSE Linux 6.36.4 Gnomelib - Local Buffer Overflow

SuSE Linux 6.36.4 Gnomelib - Local Buffer Overflow // source: https://www.securityfocus.com/bid/1155/info A vulnerability exists in the handling of the DISPLAY variable, in versions of Gnomelib shipped with S.u.S.E. Linux, version 6.3. By supplying a long buffer containing machine executable code...

SuSE Linux 6.3/6.4 Gnomelib - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/1155/info A vulnerability exists in the handling of the DISPLAY variable, in versions of Gnomelib shipped with S.u.S.E. Linux, version 6.3. By supplying a long buffer containing machine executable code in the DISPLAY environment variable, it is possibl...

Solaris 2.67.0 - lpset -r Local Buffer Overflow (3)

Solaris 2.67.0 - lpset -r Local Buffer Overflow 3 / source: https://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. However...

Solaris 2.6/7.0 - 'lpset -r' Local Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. However, when supplied a well crafted buffer containing...

Solaris 2.6/7.0 - 'lpset -r' Local Buffer Overflow (3)

/ source: https://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. However, when supplied a well crafted buffer containing...

Solaris 2.6/7.0 - 'lpset -r' Local Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. However, when supplied a well crafted buffer containing...