1237 matches found
Critical: Red Hat Security Advisory: openssl, mm security update for Stronghold
Updated Apache packages are available which fix several serious buffer overflow vulnerabilities in OpenSSL and a local privilege escalation vulnerability in MM. Note: Please read the "Solution" section below as there are special upgrade instructions for this errata. ----------- OpenSSL is a...
CVE-2001-1384
ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or setgid program that itself calls an unprivileged program, such as newgrp...
FreeBSD-SA-02:32.pppd
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:32.pppd Security Advisory The FreeBSD Project Topic: exploitable race condition in pppd Category: core Module: pppd Announced: 2002-07-31 Credits: Sebastian Krahmer...
CVE-2002-0435
Race condition in the recursive 1 directory deletion and 2 directory move in GNU File Utilities fileutils 4.1 and earlier allows local users to delete directories as the user running fileutils by moving a low-level directory to a higher level as it is being deleted, which causes fileutils to chdi...
HP Tru64 4.0/5.0/5.1 - _XKB_CHARSET Local Buffer Overflow
source: https://www.securityfocus.com/bid/5648/info Tru64 is a commercially available Unix operating system originally developed by Digital. It is distributed and maintained by HP. A buffer overflow has been discovered in the XKBCHARSET library. A number of programs depend on the library, includi...
CVE-2002-0542
mail in OpenBSD 2.9 and 3.0 processes a tilde escape character in a message even when it is not in interactive mode, which could allow local users to gain root privileges via calls to mail in cron...
CVE-2001-1276
ispell before 3.1.20 allows local users to overwrite files of other users via a symlink attack on a temporary file...
CVE-2001-1203
Format string vulnerability in gpm-root in gpm 1.17.8 through 1.17.18 allows local users to gain root privileges...
simpleinit root exploit - file descriptor left open
Background ---------- Simpleinit is an init program for Linux systems. It is included in the util-linux distribution. More information about simpleinit is available at http://www.atnf.csiro.au/people/rgooch/linux/boot-scripts/. Problem ------- Simpleinit leaves a file descriptor open in some chil...
QNX
Shouts Zen-parse, lockdown, sloth, ^ChAoS, elfan, Albert E., S. Hawking, Ali G, Jenna Jameson flur, FreeBSD Security Officers, the guy that used to clean our desks every morning and still cleans jaguars desk., QNX developers, Jon Lasser col/67, merlions girlfriend, ourselves and Jenna again. Issu...
Multiple vulnerabilities in QNX
I think I found what appears to be several or one fundamental vulnerabilities under QNXtested on version 4.25. I have not found any documentation/reference to these anywhere, so I assume they/it were not known. Importance of the bug: any local user can gain root accesswhich, under QNX, means root...
CVE-2002-0356
Vulnerability in XFS filesystem reorganizer fsrxfs in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files...
CVE-2002-0259
InstantServers MiniPortal 1.1.5 and earlier stores sensitive login and account data in plaintext in 1 .pwd files in the miniportal/apache directory, or 2 mplog.txt, which could allow local users to gain privileges...
Pine Internet Advisory: Setuid application execution may give local root in FreeBSD
-----BEGIN PGP SIGNED MESSAGE----- ----------------------------------------------------------------------------- Pine Internet Security Advisory ----------------------------------------------------------------------------- Advisory ID : PINE-CERT-20020401 Authors : Joost Pol [email protected] Issue...
CVE-2002-0162
LogWatch before 2.5 allows local users to execute arbitrary code via a symlink attack on the logwatch temporary directory...
LogWatch 2.1.12.5 - Insecure Temporary Directory Creation
LogWatch 2.1.12.5 - Insecure Temporary Directory Creation source: https://www.securityfocus.com/bid/4374/info LogWatch is a freely available, open source script for monitoring log files. It may be used with the Linux and Unix Operating systems. Upon execution, LogWatch creates a directory in /tmp...
CVE-2002-0130
Buffer overflow in efax 0.9 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -x argument...
CVE-2002-0130
Buffer overflow in efax 0.9 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -x argument...