IRIX /usr/lib/print/netprint local root symbols exploit.

i haven't audited anything in some time. well, i just noticed this because i am doing a project with a name similar to "netprint" and i was wondering if it was at all related to what i was doing. it wasn't. but, i noticed it was setuid root and had a little bug. this bug takes advantage of the -n...

[SECURITY] [DSA 052-1] New sendfile packages fix root exploit

---------------------------------------------------------------------------- Debian Security Advisory DSA 052-1 [email protected] http://www.debian.org/security/ Martin Schulze April 23, 2001 - ---------------------------------------------------------------------------- Package : sendfile...

[SECURITY] [DSA 050-1] New version sendfile fix local root exploit

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------------- Debian Security Advisory DSA 050-1 [email protected] http://www.debian.org/security/ Martin Schulze April 20, 2001 -...

PT-2001-1001 · Openssh +1 · Openssh-Askpass-Gnome +5

Name of the Vulnerable Software and Affected Versions: OpenSSH versions 3.0.1 and earlier openssh-server-2.9p2 openssh-clients-2.9p2 openssh-2.9p2 openssh-askpass-2.9p2 openssh-askpass-gnome-2.9p2 ssh-askpass-ptk Description: The issue concerns multiple vulnerabilities in OpenSSH and related...

[LSD] Solaris kcsSUNWIOsolf.so and dtsession vulnerabilities

There exists a buffer overflow vulnerability in the way the KCMSPROFILES environment variable is handled by the kcsSUNWIOsolf.so library. When appropriately exploited through a kcmsconfigure program it can lead to a local root compromise on a vulnerable system. There also exists a buffer overflow...

Solaris kcms_configure vulnerability

Solaris kcmsconfigure vulnerability Discovered and exploited by: Riley Hassell [email protected] Release Date: April 9, 2001 Systems Affected: Solaris 7/8 x86 and sparc Versions prior are also most likely affected Description: It was another long day at eEye where the beer was once again cold but eE...

ascdc Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TITLE: ascdc Buffer Overflow Vulnerability ADVISORY ID: WSIR-01/02-06 DISCOVERED BY: Christer Цberg, Wkit Security AB CONTACT: [email protected], Wkit Security AB CLASS: Buffer Overflow OBJECT: ascdc exec VENDOR: Rob Malda http://www.CmdrTaco.net...

Progress Database Server 8.3b (prodb) Local Root Exploit

Exploit for multiple platform in category local exploits ======================================================== Progress Database Server 8.3b prodb Local Root Exploit ======================================================== / progress database server v8.3b local root compromise. for sco-unix an...

FreeBSD 3.5.1/4.2 ports package local root exploit

Exploit for bsd platform in category local exploits ================================================== FreeBSD 3.5.1/4.2 ports package local root exploit ================================================== / xklock - FreeBSD 3.5.1 & 4.2 ports package local root exploit The X key lock program conta...

FreeBSD 3.5.1/4.2 Ports Package Local Root Exploit

Exploit for bsd platform in category local exploits ================================================== FreeBSD 3.5.1/4.2 Ports Package Local Root Exploit ================================================== / ja-elvis & ko-helvis - FreeBSD 3.5.1 & 4.2 ports package local root exploit vulnerable:...

Tru64 UNIX 4.0g - '/usr/bin/at' Local Privilege Escalation

/ Tru64 UNIX 4.0g JAVA /usr/bin/at local root exploit. ALPHA Author: Cody Tubbs loophole of hhp. Site: www.hhp-programming.net Email: [email protected] Date: 2/1/2000. I made this without access to gdb, It's untested... may require modification, may require deletion, heh. Note: executablestack...

Серьезные дырки в KTH Kerberos IV

Пользователь может указать krb4proxy для перенаправления запроса на авторизацию собственному прокси-серверу. В сочетании с переполнением буфера это дает возможность удаленного root-доступа. Локальный пользователь может указать собственные конфигурационные файлы, которые будут использованы для...

Ports Security Advisory: FreeBSD-SA-01:19.ja-xklock

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:19 Security Advisory FreeBSD, Inc. Topic: ja-xklock port contains a local root compromise Category: ports Module: ja-xklock Announced: 2001-02-07 Credits: Found during...

Ports Security Advisory: FreeBSD-SA-01:21.ja-elvis

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:21 Security Advisory FreeBSD, Inc. Topic: ja-elvis and ko-helvis ports contain a local root compromise Category: ports Module: ja-elvis/ko-helvis Announced: 2001-02-07...

FreeBSD-SA-01:21.ja-elvis

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:21 Security Advisory FreeBSD, Inc. Topic: ja-elvis and ko-helvis ports contain a local root compromise Category: ports Module: ja-elvis/ko-helvis Announced: 2001-02-07...

FreeBSD-SA-01:19.ja-klock

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:19 Security Advisory FreeBSD, Inc. Topic: ja-xklock port contains a local root compromise Category: ports Module: ja-xklock Announced: 2001-02-07 Credits: Found during...

[SECURITY] [DSA-017-1] New version of jazip released

---------------------------------------------------------------------------- Debian Security Advisory DSA-017-1 [email protected] http://www.debian.org/security/ Martin Schulze January 23, 2001 - ---------------------------------------------------------------------------- Package : jazip...

BSD chpass (pw_error(3)) Local Root Exploit

Exploit for bsd platform in category local exploits =========================================== BSD chpass pwerror3 Local Root Exploit =========================================== / TESO BSD chpass exploit - caddis greets: !teso, !w00w00, hert!, ozsecurity, plus613 / include char bsdshellcode =...

Glibc Local Root Exploit

Hi all, This has been bouncing around on vuln-dev and the debian-devel lists. It effects glibc = 2.1.9x and it would seem many if not all OSes using these versions of glibc. Ben Collins writes, "This wasn't supposed to happen, and the actual fix was a missing comma in the list of secure env vars...

Sendmail 8.11.x (Linux/i386) - Local Privilege Escalation

/ sendmail 8.11.x exploit i386-Linux by [email protected] sd@ircnet This code exploits well-known local-root bug in sendmail 8.11.x, 8.12.x may be vulnerable too, but I didn't test it. It gives instant root shell with +s sendmail 8.11.x, x 6 We're using objdump, gdb & grep in order to obtain VECT, so make...