Local root vulnerability in most used Linux kernels

There is a zeroday exploit for kernel in hands of scriptkiddies. After they rooted locally 2 system which I've intrest and did dd if=/dev/zero of=/dev/hda1 & on both, I spended 7 hours to finding fragments we really need easies tools LDE with GUI block search capabilities This with help of Peter ...

Linux Kernel 2.2.x 2.4.0-test1 (SGI ProPack 1.21.3) - Sendmail 8.10.1 Capabilities Privilege Escalation (2)

Linux Kernel 2.2.x 2.4.0-test1 SGI ProPack 1.21.3 - Sendmail 8.10.1 Capabilities Privilege Escalation 2 source: https://www.securityfocus.com/bid/1322/info POSIX "Capabilities" have recently been implemented in the Linux kernel. These "Capabilities" are an additional form of privilege control to...

[SECURITY] New version of splitvt released (update)

Package: splitvt Vulnerability: local root exploit Debian-specific: no This is an update to the previous splitvt advisory. The previous release had incorrrect addresses for the updates for Debian GNU/Linux potato. The version of splitvt distributed in Debian GNU/Linux 2.1 a.k.a. slink, as well as...

[SECURITY] New version of splitvt released (update)

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman June 5, 2000 - ------------------------------------------------------------------------ Package: splitvt Vulnerability: local root...

[SECURITY] New version of splitvt released

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz June 5, 2000 - ---------------------------------------------------------------------------- Package: splitvt Vulnerability:...

Очередной локальный root в Solaris

Переполнение буфера в suid root /usr/lib/lp/bin/netpr...

Локальный root через X-сервер

Переполнение буфера при вызове XFree86 с параметром -xkbmap и длинным аргументом. При этом аргумент может содержать только текстовые символы, что затрудняет эксплоит, но не делает его невозможным...

FreeBSD Security Advisory: FreeBSD-SA-00:12.healthd

============================================================================= FreeBSD-SA-00:12 Security Advisory FreeBSD, Inc. Topic: healthd allows a local root compromise Category: ports Module: healthd Announced: 2000-04-10 Credits: Discovered during FreeBSD ports collection auditing. Affects:...

FreeBSD-SA-00:12.healthd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:12 Security Advisory FreeBSD, Inc. Topic: healthd allows a local root compromise Category: ports Module: healthd Announced: 2000-04-10 Credits: Discovered during FreeBSD...

Local root compromise in GNQS 3.50.6 and 3.50.7

A large security hole was uncovered last month in Generic-NQS ver. 3.50.6 and 3.50.7. This hole leads to immediate local root compromise. All users of those versions are requested to upgrade to ver. 3.50.8 or later ASAP. The updated package can be downloaded from...

Security Advisory: FreeBSD-SA-00:09.mtr

============================================================================= FreeBSD-SA-00:09 Security Advisory FreeBSD, Inc. Topic: mtr port contains a local root exploit. Category: ports Module: mtr Announced: 2000-03-15 Affects: Ports collection before the correction date. Corrected: 2000-03-...

FreeBSD-SA-00:09.mtr

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:09 Security Advisory FreeBSD, Inc. Topic: mtr port contains a local root exploit. Category: ports Module: mtr Announced: 2000-03-15 Affects: Ports collection before the...

FreeBSD-SA-00:10.orville-write

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:10 Security Advisory FreeBSD, Inc. Topic: orville-write port contains local root compromise. Category: ports Module: orville-write Announced: 2000-03-15 Affects: Ports...

Halloween Linux 4.0 RedHat Linux 6.16.2 - imwheel (1)

Halloween Linux 4.0 RedHat Linux 6.16.2 - imwheel 1 // source: https://www.securityfocus.com/bid/1060/info A vulnerability exists in the 'imwheel' package for Linux. This package is known to be vulnerable to a buffer overrun in its handling of the HOME environment variable. By supplying a...

AT Computing atsar_linux 1.4 - File Manipulation

source: https://www.securityfocus.com/bid/1048/info atsar is a linux load monitoring software package released under the GPL by AT Computing. atsadc is a setuid root binary that is included in the atsar package. atsadc is setuid because it obtains informatin via /dev/kmem. atsadc will accept as a...

dosemu.sh

[email protected] - Corel Linux dosemu config error. Local root compromise. Software: Corel Linux 1.0 dosemu distribution configuration URL: http://linux.corel.com Version: Version 1.0 The system.com command is available to any user who runs the dos emulator. This is a direct violation of the advice...

FreeBSD-SA-00:03.asmon

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:03 Security Advisory FreeBSD, Inc. Topic: Asmon/Ascpu ports fail to drop privileges Category: ports Module: asmon/ascpu Announced: 2000-02-19 Affects: Ports collection...

CVE-1999-0411

The vulnerability CVE-1999-0411 affects SCO OpenServer Enterprise System v5.0.4p, where startup scripts S84rpcinit, S95nis, S85tcp, and S89nfs are susceptible to a symlink attack that can let a local user gain root access. The root cause is a symlink-attack in the startup scripts, enabling privil...

CVE-1999-0092

Various vulnerabilities in the AIX portmir command allows local users to obtain root access...

FreeBSD-SA-00:02.procfs

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:01 Security Advisory FreeBSD, Inc. Topic: Old procfs hole incompletely filled Category: core Module: make Announced: 2000-01-24 Affects: All versions before the correctio...