cdrtools: Local root vulnerability in cdrecord if set SUID root

Background The cdrtools package is a set of tools for CD recording, including the popular cdrecord command-line utility. Description Max Vozeler discovered that the cdrecord utility, when set to SUID root, fails to drop root privileges before executing a user-supplied RSH program. By default,...

[Full-Disclosure] MDKSA-2004:091 - Updated cdrecord packages fix local root vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrakelinux Security Update Advisory Package name: cdrecord Advisory ID: MDKSA-2004:091 Date: September 7th, 2004 Affected versions: 10.0, 9.2 Problem Description: Max Vozeler found that the cdrecord program, which is suid root, fails to drop euid=0...

Mandrake Linux Security Advisory : cups (MDKSA-2003:001)

iDefense reported several security problems in CUPS that can lead to local and remote root compromise. An integer overflow in the HTTP interface can be used to gain remote access with CUPS privilege. A local file race condition can be used to gain root privilege, although the previous bug must be...

Qpopper 4.0.x - 'poppassd' Privilege Escalation

/ Title: Qpopper v4.0.x poppassd local root exploit. Exploit code: 0x82-Local.Qp0ppa55d.c -- ./0x82-Local.Qp0ppa55d -u x82 -p mypasswd Qpopper v4.0.x poppassd local root exploit. by Xpl017Elz / include include include include define BUFSZ 0x82 define DPOPPASS "/usr/local/bin/poppassd" define DNAM...

Solaris kcms_configure vulnerability

Solaris kcmsconfigure vulnerability Discovered and exploited by: Riley Hassell [email protected] Release Date: April 9, 2001 Systems Affected: Solaris 7/8 x86 and sparc Versions prior are also most likely affected Description: It was another long day at eEye where the beer was once again cold but eE...

IBM Network Station Manager 2.0 R1 - Race Condition

// source: https://www.securityfocus.com/bid/900/info IBM's Network Station Manager is a client/server application which facilitates management for IBM Network Stations. It is possible to locally gain root priviliges on hosts running the NetStation daemon. NetStation which runs as root creates...