4395 matches found
Mac OS X <= 10.4.7 Mach Exception Handling Local Exploit (10.3.x 0day)
No description provided by source. / excploit.c - 28 Nov 2005 - [email protected] Exploitable Mach Exception Handling Affected: Mac OS X 10.4.6 darwin 8.6.0 and older When a process executes a setuid executable, all existing rights to the task port are invalidated, to make sure unauthorize...
CORE-2006-0322: Multiple vulnerabilities in ICQ Toolbar 1.3 for Internet Explorer
Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Multiple vulnerabilities in ICQ Toolbar 1.3 for Internet Explorer Date Published: 2006-09-07 Last Update: 2006-09-06 Advisory ID: CORE-2006-0322 Bugtraq ID: None currently assigned CVE Name: None currently assign...
CVE-2006-4522
The CVE-2006-4522 entry concerns IBM AIX 5.2 and 5.3, where the dtterm component is affected. The vulnerability allows a local user to execute arbitrary code with root privileges via unspecified vectors/vulnerabilities in dtterm. No concrete exploit details, affected versions beyond the stated AI...
TIBCO Rendezvous <= 7.4.11 Password Extractor Local Exploit
Exploit for unknown platform in category local exploits =========================================================== TIBCO Rendezvous tibco.exe c:\rvrd.db Tibco RendezVous Password Dumper Affected versions =v7.4.11 Author: Andres Tarasco atarasco @ sia.es Url: http://www.514.es + Tibco Logfile...
CVE-2006-4306
CVE-2006-4306 concerns Solaris 8 and 9 prior to 2006-08-21. The NVD entry describes an unspecified vulnerability that allows local users to execute arbitrary commands, leveraging the default RBAC (Role-Based Access Control) settings in the File System Management profile. The precise vector is not...
gotpwnedagainmail.sh.txt
!/bin/sh http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom Previously undisclosed local fetchmail issue. This takes setgid=6 http://docs.info.apple.com/article.html?artnum=106704 export PATH=/tmp:$PATH echo /bin/sh -i /tmp/uname chmod +x /tmp/uname /usr/bin/fetchmail -V...
KLA10136 OSI vulnerability in DeviceLock
Improper ACL enforcing was found in DeviceLock. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited locally. Original advisories - Related products DeviceLock CVE list CVE-2006-4184 warning Solution Update to latest version Impact...
[UNIX] Liblesstif Local Root (Exploit)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
Mac OS X <= 10.3.8 (CF_CHARSET_PATH) Local BOF Exploit (2)
Exploit for macOS platform in category local exploits ========================================================== Mac OS X = 10.3.8 CFCHARSETPATH Local BOF Exploit 2 ========================================================== !/usr/bin/perl http://www.digitalmunition.com written by kf...
rocksumountdirty.txt
!/usr/bin/env python rocksumountdirty.py: Rocks release =4.1 local root exploit quick and nasty version of the exploit. make sure the . is writable and you clean up afterwards. ; coded by: [email protected] http://xavsec.blogspot.com x=import'os';c=x.getcwd open'%s/x'%c, 'a'.write"!/bin/sh\ncp...
Agnitum Outpost Firewall 3.5.631 - FiltNT.SYS Local Denial of Service
Agnitum Outpost Firewall 3.5.631 - FiltNT.SYS Local Denial of Service source: https://www.securityfocus.com/bid/19026/info Outpost Firewall is prone to a local denial-of-service vulnerability. An attacker can exploit this issue to crash the application, effectively denying service. Outpost Firewa...
Rocks Clusters <= 4.1 (umount-loop) Local Root Exploit
Exploit for linux platform in category local exploits ====================================================== Rocks Clusters = 4.1 umount-loop Local Root Exploit ====================================================== !/usr/bin/env python rocksumountdirty.py: Rocks release =4.1 local root exploit...
msword-hlink-ohday.txt
Hi people, the same problem concerning hlink.dll already exploited in excel is present even in Microsoft Word, but Word 2003 seems, luckily, not vulnerable. this one is the public 0-day I made for Microsoft Word. the author is "SYS 49152" obviusly it's a local sploit .. best regards. SYS 49152...
Apple Mac OSX 10.4.6 (PPC) - 'launchd' Local Format String
!/usr/bin/perl http://www.digitalmunition.com/FailureToLaunch-ppc.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom Much appreciation goes to John H for all kindsa random shit like exploiting Veritas and other random things in the past core... where the hell are you fool. This is just a...
IntelliTamper 2.07 - .map Local Arbitrary Code Execution (1)
IntelliTamper 2.07 - .map Local Arbitrary Code Execution 1 /////////////////////////////////////////////////////////////////// //++ // IntelliTamper web analysis .Map File Handling Local Exploit // // Discovery By: Devil00 [email protected] // Coded By: JAAScois http://www.jaascois.com //++...
IntelliTamper 2.07 - '.map' Local Arbitrary Code Execution (1)
/////////////////////////////////////////////////////////////////// //++ // IntelliTamper web analysis .Map File Handling Local Exploit // // Discovery By: Devil00 [email protected] // Coded By: JAAScois http://www.jaascois.com //++...
FreeBSD : sge -- local root exploit in bundled rsh executable (57a0242d-8c4e-11da-8ddf-000ae42e9b93)
Sun Microsystems reports : The SGE 6.0u71 release fixes a security bug which can allow malicious users to gain root access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright...
Oracle <= 10g Release 2 (DBMS_EXPORT_EXTENSION) Local SQL Exploit
Exploit for multiple platform in category local exploits...
[Full-disclosure] [SECURITY] [DSA 1040-1] New gdm packages fix local root exploit
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1040-1 [email protected] http://www.debian.org/security/ Martin Schulze April 24th, 2006 http://www.debian.org/security/faq -...
DEBIAN-CVE-2006-0745
X.Org server xorg-server 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid, which allows local users to bypass intended restrictions and 1 execute arbitrary code via the -modulepath command line optio...