26 matches found
EUVD-2017-17791
Malware in sbrugna...
EUVD-2017-14974
Malware in sbrugna...
EUVD-2021-12526
Malware in sbrugna...
EUVD-2004-0186
Malware in sbrugna...
CVE-2021-25630
"loolforkit" is a privileged program that is supposed to be run by a special, non-privileged "lool" user. Before doing anything else "loolforkit" checks, if it was invoked by the "lool" user, and refuses to run with privileges, if it's not the case. In the vulnerable version of "loolforkit" this...
loolforkit Security Vulnerabilities
Loolforkit is a Global Loolforkit open source application that provides a cloud-based office suite based on collaborative editing. A security vulnerability exists in loolforkit, which can be exploited by an attacker to gain local root privileges...
CVE-2021-25630: Improper Privilege Management
"loolforkit" is a privileged program that is supposed to be run by a special, non-privileged "lool" user. Before doing anything else "loolforkit" checks, if it was invoked by the "lool" user, and refuses to run with privileges, if it's not the case. In the vulnerable version of "loolforkit" this...
CVE-2021-25630
"loolforkit" is a privileged program that is supposed to be run by a special, non-privileged "lool" user. Before doing anything else "loolforkit" checks, if it was invoked by the "lool" user, and refuses to run with privileges, if it's not the case. In the vulnerable version of "loolforkit" this...
CVE-2017-4918: VMware Horizon macOS client code injection vulnerability analysis-vulnerability warning-the black bar safety net
This article I want to discuss under the VMware Horizon macOS client version 4. 4. 0, the 5164329 of a code injection vulnerability, which can be used to obtain local root privileges. The good news is this issue already in the latest version is fix. 0x01 analysis On my MAC the above understanding...
Cisco Hybrid Media Service Elevation of Privilege Vulnerability
Cisco Hybrid Media Service is a hybrid media service developed by Cisco. An elevation of privilege vulnerability exists in the Cisco Hybrid Media Service installer, which allows local attackers to exploit the vulnerability to gain local ROOT privileges...
Mageia: Security Advisory (MGASA-2015-0407)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DSA-3357-1 vzctl - security update
Bulletin has no description...
CVE-2013-1196: Improper Input Validation
The command-line interface in Cisco Secure Access Control System ACS, Identity Services Engine Software, Context Directory Agent, Application Networking Manager ANM, Prime Network Control System, Prime LAN Management Solution LMS, Prime Collaboration, Unified Provisioning Manager, Network Service...
HP-UX Update for dtmailpr Software HPSBUX00300
Check for the Version of dtmailpr Software OpenVAS Vulnerability Test HP-UX Update for dtmailpr Software HPSBUX00300 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...
HP-UX PHSS_29737 : HP-UX Running dtmailpr Software, Local Root Privileges. (HPSBUX00300 SSRT3667 rev.2)
s700800 11.23 CDE Base Periodic Patch : A potential buffer overflow exists in a function called by the suid root program dtmailpr. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS29737. The text itself is...
CDRecord's ReadCD Local Root Privileges
No description provided by source. !/bin/bash echo "readcd-exp.sh -- ReadCD local exploit Test on cdrecord-2.01-0.a27.2mdk" echo "Author : newbug at chroot.org" echo "Date :09.13.2004" echo "IRC : irc.chroot.org discuss" export READCD=/usr/bin/readcd cd /tmp cat s.c EOF include unistd.h include...
CVE-2004-0077: Undefined Security Weakness
The domremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the domunmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different...
[SECURITY] [DSA 417-1] New Linux 2.4.18 packages fix local root exploit (powerpc+alpha)
-------------------------------------------------------------------------- Debian Security Advisory DSA 417-1 [email protected] http://www.debian.org/security/ Martin Schulze January 7th, 2004 http://www.debian.org/security/faq -...
iDEFENSE Security Advisory 09.16.2002: FreeBSD Ports libkvm Security Vulnerabilities
iDEFENSE Security Advisory 09.16.2002 FreeBSD Ports libkvm Security Vulnerabilities DESCRIPTION The FreeBSD ports asmon, ascpu, bubblemon, wmmon, and wmnet2 can be locally manipulated to take advantage of open file descriptors /dev/mem and /dev/kmem to gain root privileges on a target host. These...