1463 matches found
Debian DSA-466-1 : linux-kernel-2.2.10-powerpc-apus - failing function and TLB flush
Paul Starzetz and Wojciech Purczynski of isec.pl discovered a critical security vulnerability in the memory management code of Linux inside the mremap2 system call. Due to flushing the TLB Translation Lookaside Buffer, an address cache too early it is possible for an attacker to trigger a local...
Debian DSA-054-1 : cron - local root exploit
A recent fall 2000 security fix to cron introduced an error in giving up privileges before invoking the editor. This was discovered by Sebastian Krahmer from SuSE. A malicious user could easily gain root access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
Debian DSA-439-1 : linux-kernel-2.4.16-arm - several vulnerabilities
Several local root exploits have been discovered recently in the Linux kernel. This security advisory updates the ARM kernel for Debian GNU/Linux. The Common Vulnerabilities and Exposures project identifies the following problems that are fixed with this update : - CAN-2003-0961 : An integer...
Debian DSA-514-1 : kernel-image-sparc-2.2 - failing function and TLB flush
Paul Starzetz and Wojciech Purczynski of isec.pl discovered a critical security vulnerability in the memory management code of Linux inside the mremap2 system call. Due to flushing the TLB Translation Lookaside Buffer, an address cache too early it is possible for an attacker to trigger a local...
Debian DSA-066-1 : cfingerd - remote exploit
Steven van Acker reported on bugtraq that the version of cfingerd a configurable finger daemon as distributed in Debian GNU/Linux 2.2 suffers from two problems : - The code that reads configuration files files in which $ commands are expanded copied its input to a buffer without checking for a...
CDRecord's ReadCD Local Root Privileges
Exploit for linux platform in category local exploits ======================================= CDRecord's ReadCD Local Root Privileges ======================================= !/bin/bash echo "readcd-exp.sh -- ReadCD local exploit Test on cdrecord-2.01-0.a27.2mdk" echo "Author : newbug at chroot.or...
CDRecord's ReadCD Local Root Privileges
No description provided by source. !/bin/bash echo "readcd-exp.sh -- ReadCD local exploit Test on cdrecord-2.01-0.a27.2mdk" echo "Author : newbug at chroot.org" echo "Date :09.13.2004" echo "IRC : irc.chroot.org discuss" export READCD=/usr/bin/readcd cd /tmp cat s.c EOF include unistd.h include...
GLSA-200409-18 : cdrtools: Local root vulnerability in cdrecord if set SUID root
The remote host is affected by the vulnerability described in GLSA-200409-18 cdrtools: Local root vulnerability in cdrecord if set SUID root Max Vozeler discovered that the cdrecord utility, when set to SUID root, fails to drop root privileges before executing a user-supplied RSH program. By...
SUS 2.0.2 local root vulnerability
LSS Security Advisories http://security.lss.hr --- Title : SUS 2.0.2 local root vulnerability Advisory ID : LSS2004-09-01 Date : September 14th, 2004 Advisory URL: : http://security.lss.hr/index.php?page=details&ID=LSS-2004-09-01 Impact : Any user can obtain root privileges Risk level : High...
[RLSA_04-2004] QNX crrtrap possible race condition vulnerability
rfdslabs security advisory Title: QNX crrtrap possible race condition vulnerability RLSA04-2004 Versions: QNX RTP 6.1 possibly others Vendor: http://www.qnx.com Date: Sep 13 2004 Author: Julio Cesar Fort julio at rfdslabs com br 1. Introduction crrtrap is a tool to detect video hardware and start...
SUS: Local root vulnerability
Background SUS is a utility that allows regular users to be able to execute certain commands as root. Description Leon Juranic found a bug in the logging functionality of SUS that can lead to local privilege escalation. A format string vulnerability exists in the log function due to an incorrect...
cdrtools: Local root vulnerability in cdrecord if set SUID root
Background The cdrtools package is a set of tools for CD recording, including the popular cdrecord command-line utility. Description Max Vozeler discovered that the cdrecord utility, when set to SUID root, fails to drop root privileges before executing a user-supplied RSH program. By default,...
cdrdao.sh
!/bin/sh DIR=pwd echo "" echo "cdrdao local root exploit - gr doesn't protect you this time" echo "Karol Wiêsek " echo "" sleep 2 umask 000 echo -n " Checking if /etc/ld.so.preload doesn't exist ... " if -f /etc/ld.so.preload ; then echo "WRONG" echo "/etc/ld.so.preload exists, write another...
qnx-pppoed-multiple-flaws.txt
rfdslabs security advisory Title: QNX PPPoEd local root vulnerabilities RLSA01-2004 Versions: QNX RTP 6.1 possibly others Vendor: http://www.qnx.com Date: 02 Sep 2004 Author: Julio Cesar Fort 1. Introduction PPPoEd daemon is used to provide a PPPoE connection, such as DSL, for QNX users. More...
[Full-Disclosure] MDKSA-2004:091 - Updated cdrecord packages fix local root vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrakelinux Security Update Advisory Package name: cdrecord Advisory ID: MDKSA-2004:091 Date: September 7th, 2004 Affected versions: 10.0, 9.2 Problem Description: Max Vozeler found that the cdrecord program, which is suid root, fails to drop euid=0...
[RLSA_01-2004] QNX PPPoEd local root vulnerabilities
rfdslabs security advisory Title: QNX PPPoEd local root vulnerabilities RLSA01-2004 Versions: QNX RTP 6.1 possibly others Vendor: http://www.qnx.com Date: 02 Sep 2004 Author: Julio Cesar Fort julio at rfdslabs com br 1. Introduction PPPoEd daemon is used to provide a PPPoE connection, such as DSL...
CDRDAO Local Root Exploit
Exploit for linux platform in category local exploits ========================= CDRDAO Local Root Exploit ========================= !/bin/sh DIR=pwd echo "" echo "cdrdao local root exploit - gr doesn't protect you this time" echo "Karol Wi?sek " echo "" sleep 2 umask 000 echo -n " Checking if...
CVE-2002-1367
Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need...
SquirrelMail (chpasswd) Local Root Bruteforce Exploit
Exploit for linux platform in category local exploits ===================================================== SquirrelMail chpasswd Local Root Bruteforce Exploit ===================================================== / PSTchpasswdexp-vb.c: Squirrelmail chpasswd local root bruteforce exploit Author:...