433 matches found
SCO Openserver 5.0.7 (MMDF deliver) Local Root Exploit
Exploit for sco platform in category local exploits ====================================================== SCO Openserver 5.0.7 MMDF deliver Local Root Exploit ====================================================== / MMDF deliver local root exploit for SCO OpenServer 5.0.7 x86 Copyright 2004 Ramo...
SCO OpenServer 5.0.7 - MMDF deliver Privilege Escalation
SCO OpenServer 5.0.7 - MMDF deliver Privilege Escalation / MMDF deliver local root exploit for SCO OpenServer 5.0.7 x86 Copyright 2004 Ramon de Carvalho Valle / char shellcode= / 36 bytes / "\x68\xff\xf8\xff\x3c" / pushl $0x3cfff8ff / "\x6a\x65" / pushl $0x65 / "\x89\xe6" / movl %esp,%esi /...
Debian DSA-403-1 : kernel-image-2.4.18-1-alpha, kernel-image-2.4.18-1-i386, kernel-source-2.4.18 - local root exploit
Recently multiple servers of the Debian project were compromised using a Debian developers account and an unknown root exploit. Forensics revealed a burneye encrypted exploit. Robert van der Meulen managed to decrypt the binary which revealed a kernel exploit. Study of the exploit by the Red Hat...
Debian DSA-092-1 : wmtv - local root exploit
Nicolas Boullis found a nasty security problem in the wmtv a dockable video4linux TV player for windowmaker package as distributed in Debian GNU/Linux 2.2. wmtv can optionally run a command if you double-click on the TV window. This command can be specified using the -e command line option...
Debian DSA-189-1 : luxman - local root exploit
iDEFENSE reported about a vulnerability in LuxMan, a maze game for GNU/Linux, similar to the PacMan arcade game. When successfully exploited a local attacker gains read-write access to the memory, leading to a local root compromise in many ways, examples of which include scanning the file for...
Debian DSA-454-1 : linux-kernel-2.2.22-alpha - failing function and TLB flush
Paul Starzetz and Wojciech Purczynski of isec.pl discovered a critical security vulnerability in the memory management code of Linux inside the mremap2 system call. Due to flushing the TLB Translation Lookaside Buffer, an address cache too early it is possible for an attacker to trigger a local...
Debian DSA-119-1 : ssh -- local root exploit, remote client exploit
Joost Pol reports that OpenSSH versions 2.0 through 3.0.2 have an off-by-one bug in the channel allocation code. This vulnerability can be exploited by authenticated users to gain root privilege or by a malicious server exploiting a client with this bug. %NASLMINLEVEL 999999 @DEPRECATED@ This...
Debian DSA-155-1 : kdelibs - privacy escalation with Konqueror
Due to a security engineering oversight, the SSL library from KDE, which Konqueror uses, doesn't check whether an intermediate certificate for a connection is signed by the certificate authority as safe for the purpose, but accepts it when it is signed. This makes it possible for anyone with a...
Debian DSA-101-1 : sudo - Local root exploit
Sebastian Krahmer from SuSE found a vulnerability in sudo which could easily lead into a local root exploit. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-101. The text itself is copyrig...
Debian DSA-466-1 : linux-kernel-2.2.10-powerpc-apus - failing function and TLB flush
Paul Starzetz and Wojciech Purczynski of isec.pl discovered a critical security vulnerability in the memory management code of Linux inside the mremap2 system call. Due to flushing the TLB Translation Lookaside Buffer, an address cache too early it is possible for an attacker to trigger a local...
Debian DSA-054-1 : cron - local root exploit
A recent fall 2000 security fix to cron introduced an error in giving up privileges before invoking the editor. This was discovered by Sebastian Krahmer from SuSE. A malicious user could easily gain root access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
Debian DSA-514-1 : kernel-image-sparc-2.2 - failing function and TLB flush
Paul Starzetz and Wojciech Purczynski of isec.pl discovered a critical security vulnerability in the memory management code of Linux inside the mremap2 system call. Due to flushing the TLB Translation Lookaside Buffer, an address cache too early it is possible for an attacker to trigger a local...
Debian DSA-453-1 : linux-kernel-2.2.20-i386+m68k+powerpc - failing function and TLB flush
Paul Starzetz and Wojciech Purczynski of isec.pl discovered a critical security vulnerability in the memory management code of Linux inside the mremap2 system call. Due to flushing the TLB Translation Lookaside Buffer, an address cache too early it is possible for an attacker to trigger a local...
CDRDAO Local Root Exploit
Exploit for linux platform in category local exploits ========================= CDRDAO Local Root Exploit ========================= !/bin/sh DIR=pwd echo "" echo "cdrdao local root exploit - gr doesn't protect you this time" echo "Karol Wi?sek " echo "" sleep 2 umask 000 echo -n " Checking if...
OpenSSH < 3.2.1 AFS/Kerberos Ticket/Token Passing Overflow
Binary data 1989.prm...
Mac OS X Panther Internet Connect Local Root Exploit
Exploit for macOS platform in category local exploits ==================================================== Mac OS X Panther Internet Connect Local Root Exploit ==================================================== Date: 25.07.2004 Author: B-r00t. 2004. Email: B-r00t Vendor: Apple Operating System:...
[SECURITY] [DSA 514-1] New Linux 2.2.20 packages fix local root exploit (sparc)
-------------------------------------------------------------------------- Debian Security Advisory DSA 514-1 [email protected] http://www.debian.org/security/ Martin Schulze June 4th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 514-1] New Linux 2.2.20 packages fix local root exploit (sparc)
-------------------------------------------------------------------------- Debian Security Advisory DSA 514-1 [email protected] http://www.debian.org/security/ Martin Schulze June 4th, 2004 http://www.debian.org/security/faq -...
DSA-514 kernel-image-sparc-2.2 - failing function and TLB flush
Bulletin has no description...
NetBSD Security Advisory 2004-007: Systrace systrace_exit() local root
-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2004-007 ================================= Topic: Systrace systraceexit local root Version: NetBSD-current: source prior to Apr 16, 2004 netBSD 2.0 branch: source prior to Apr 16, 2004 netBSD 1.6.2: not affected NetBSD 1.6.1: not affecte...