Local root vuln in kpopup

A local root vuln exists in Kpopup version 0.9.1latest and proberly all other versions. It is avaliable from http://www.henschelsoft.de/kpopupen.html main site http://www.freebsd.org/ports/net.html and many other places if you search kpopup on google. I. BACKGROUND Kpopup is a KDE program for...

kpopup 0.9.x - Privileged Command Execution

kpopup 0.9.x - Privileged Command Execution // source: https://www.securityfocus.com/bid/8915/info It has been alleged that it is possible for local attackers to gain root privileges through kpopup, which is is installed setuid root by default. According to the report, kpopup uses the system3...

kpopup -- local root exploit and local denial of service

Mitre CVE reports: Format string vulnerability in main.cpp in kpopup 0.9.1-0.9.5pre2 allows local users to cause a denial of service segmentation fault and possibly execute arbitrary code via format string specifiers in command line arguments. misc.cpp in KPopup 0.9.1 trusts the PATH variable whe...

Musicqueue 0.91.01.1 - Multiple Buffer Overrun Vulnerabilities

Musicqueue 0.91.01.1 - Multiple Buffer Overrun Vulnerabilities // source: https://www.securityfocus.com/bid/8903/info Multiple buffer overrun vulnerabilities have been discovered in Musicqueue. Both issues stem from the lack of bounds checking when passing user-supplied input to the sprintf libc...

Musicqueue 0.9/1.0/1.1 - Multiple Buffer Overrun Vulnerabilities

// source: https://www.securityfocus.com/bid/8903/info Multiple buffer overrun vulnerabilities have been discovered in Musicqueue. Both issues stem from the lack of bounds checking when passing user-supplied input to the sprintf libc function. As a result, it may be possible for an attacker to...

Local root exploit in SuSE Linux 7.3Pro

Affected: SuSE Linux 7.3Pro Not affected: SuSE Linux 8.2Pro, non-SuSE distributions Possibly affected: other SuSE distributions Vulnerable package: javarunt Impact: Local user can gain root privileges Exploit type: Symlink attack Release...

Local root exploit in SuSE Linux 8.2Pro

Affected: SuSE Linux 8.2Pro Not affected: SuSE Linux 7.3Pro, non-SuSE distributions Possibly affected: other SuSE distributions Vulnerable package: susewm Impact: Local user can gain root privileges Exploit type: Symlink attack Release...

hztty 2.0 Local root exploit (Tested on Red Hat 9.0)

Exploit for linux platform in category local exploits ==================================================== hztty 2.0 Local root exploit Tested on Red Hat 9.0 ==================================================== / 0x333hztty = hztty 2.0 local root exploit more info : Debian Security Advisory DSA...

Moderate: Red Hat Security Advisory: kdebase security update

Updated KDE packages that resolve a local security issue with KDM PAM support and weak session cookie generation are now available. KDE is a graphical desktop environment for the X Window System. KDE between versions 2.2.0 and 3.1.3 inclusive contain a bug in the KDE Display Manager KDM when...

Moderate: Red Hat Security Advisory: : Updated KDE packages fix security issues

Updated KDE packages that resolve a local security issue with KDM PAM support and weak session cookie generation are now available. KDE is a graphical desktop environment for the X Window System. KDE between versions 2.2.0 and 3.1.3 inclusive contain a bug in the KDE Display Manager KDM when...

Immunity Canvas: SOLARIS_LD_PRELOAD

Name| solarisLDPRELOAD ---|--- CVE| CVE-2003-0609 Exploit Pack| CANVAS Description| Solaris LDPRELOAD debug edition Notes| References: http://sunsolve.sun.com/search/printfriendly.do?assetkey=1-26-55680-1 CVE Name: CVE-2003-0609 VENDOR: Sun Notes: This is a classic local root elevation environmen...

[UNIX] Intersystems Cache' Database Two Local Root Vulnerabilities

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

SRT2003-08-01-0126 - cdrtools local root exploit

Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...

TerminatorX local root

Program: terminatorX 3.80 Impact: Users can gain local root Discovered: jaguar Writeup and exploits: Andrew Griffiths 1 Background 'terminatorX is a realtime audio synthesizer that allows you to "scratch" on digitally sampled audio data .wav, .au, .ogg, .mp3, etc. the way hiphop-DJs scratch on...

Re: [Full-Disclosure] Re: [Full-Disclosure] iDEFENSE Security Advisory 07.01.03: Caché Insecure Installation File and Directory Permissions

Here are more details of my research... Vuln1 Local attackers can exploit this to manipulate directories and binaries inside the installation tree. This may be used by a local malicious user to gain root access. The content in /cachesys/csp/user is executed as root through the web interface. user...

GNU GNATS 3.113 - Environment Variable Buffer Overflow

// source: https://www.securityfocus.com/bid/8005/info It has been reported that GNATS is prone to a buffer overflow condition when parsing certain environment variables. An attacker can exploit this vulnerability by setting an overly long environment variable and invoking one of several GNATS...

BAZARR FAREWELL

/ traceroute local root advisory / / by: bazarr / / [email protected] / / bazarr episode / ------------------ PREFACE its me bazarr. i dont use ziplip anymore. resend any emails sent to bazarr@ziplip to [email protected] if i dident respond to them. this is a local root vulnerability in the...

Linux PAM 0.77 - Pam_Wheel Module getlogin() Username Spoofing Privilege Escalation

Linux PAM 0.77 - PamWheel Module getlogin Username Spoofing Privilege Escalation source: https://www.securityfocus.com/bid/7929/info A vulnerability has been discovered in the Linux-Pam pamwheel module. The problem exists in the way the module authenticates users under certain configurations...

Linux PAM 0.77 - Pam_Wheel Module 'getlogin() Username' Spoofing Privilege Escalation

source: https://www.securityfocus.com/bid/7929/info A vulnerability has been discovered in the Linux-Pam pamwheel module. The problem exists in the way the module authenticates users under certain configurations. Specifically, if the module is configured to allow wheel group members to use the 's...

SRT2003-06-13-1009.txt

Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...