IBM U2 UniVerse 10.0.0.9 - 'uvrestore' Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/8206/info It has been reported that the uvrestore binary does not perform bounds checking when parsing command-line arguments. Because this binary is installed with suid root privileges by default, local attackers my be able to exploit this vulnerability ...

InterSystems Cache 4.1.155.0.x - Insecure Default Permissions

InterSystems Cache 4.1.155.0.x - Insecure Default Permissions source: https://www.securityfocus.com/bid/8070/info It has been reported that the permissions set by default on the files and directories comprising InterSystems Cache are insecure. The permissions on directories allegedly allow for an...

InterSystems Cache 4.1.15/5.0.x - Insecure Default Permissions

source: https://www.securityfocus.com/bid/8070/info It has been reported that the permissions set by default on the files and directories comprising InterSystems Cache are insecure. The permissions on directories allegedly allow for any user to overwrite any file. This creates many opportunities...

Important: Red Hat Security Advisory: : : : New PHP packages fix vulnerabilities

Updated PHP packages are available for Red Hat Linux on IBM iSeries and pSeries systems. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP server. The mail function in PHP 4.x to 4.2.2 may allow local script authors to bypass safe mode restrictions and modify command...

[EXPL] Exploit Code Release for lsmcode Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion Latest attack techniques. You're a pen tester, but is google.com still your R&D team? Now you can get trustworthy commercial-grade exploits...

CVE-2003-0265

The CVE-2003-0265 entry describes a race condition in SAP database’s SDBINST (version 7.3.0.29) that creates critical files with world-writable permissions before initializing the setuid bits. This allows local attackers to modify files before permissions are changed, potentially gaining root pri...

CVE-2003-0207

ps2epsi creates insecure temporary files when calling ghostscript, which allows local attackers to overwrite arbitrary files...

rpc.walld fails to properly validate messages before broadcasting to clients

Overview A vulnerability in rpc.walld may allow local users to forge wall messages. An exploit exists for this vulnerability and is publically available. Description From the rpc.walld man page:The wall command reads the named file, or, if no filename appears, it reads the standard input until an...

CVE-2003-0207

ps2epsi creates insecure temporary files when calling ghostscript, which allows local attackers to overwrite arbitrary files...

CVE-2003-0207

CVE-2003-0207 affects the ps2epsi component in gs-common. The root cause is insecure creation of temporary files when ps2epsi invokes ghostscript, which can allow a local attacker to overwrite arbitrary files. The vulnerability is documented in Debian DSA-286-1 and is reflected in multiple feeds ...

CVE-2001-0960

Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 stores the backup agent user name and password in cleartext in the aremote.dmp file in the ARCSERVE$ hidden share, which allows local and remote attackers to gain privileges...

CVE-2002-1379

OpenLDAP2 OpenLDAP 2 2.2.0 and earlier allows remote or local attackers to execute arbitrary code when libldap reads the .ldaprc file within applications that are running with extra privileges...

CVE-2002-1282

Unknown vulnerability in the telnet KIO subsystem telnet.protocol of KDE 2.x 2.1 and later allows local and remote attackers to execute arbitrary code via a certain URL...

CVE-2002-1281

CVE-2002-1281 is a KDE KIO rlogin/telnet protocol vulnerability. The KDE 2.x releases (2.1 and later) and KDE 3.x up to 3.0.4 allow a crafted URL in an HTML page, email, or other KIO-enabled app to execute arbitrary commands with the victim’s account, enabling local or remote code execution. Publ...

CVE-2002-0711

Unknown vulnerability in Cluster Interconnect for HP TruCluster Server 5.0A, 5.1, and 5.1A may allow local and remote attackers to cause a denial of service...

CVE-2002-1202

Unknown vulnerability in routed for HP Tru64 UNIX V4.0F through V5.1A allows local and remote attackers to read arbitrary files...

DEBIAN-CVE-2002-1227

PAM 0.76 treats a disabled password as if it were an empty null password, which allows local and remote attackers to gain privileges as disabled users...

CVE-2002-1202

Unknown vulnerability in routed for HP Tru64 UNIX V4.0F through V5.1A allows local and remote attackers to read arbitrary files...

Apache 2.0.3940 - Oversized STDERR Buffer Denial of Service

Apache 2.0.3940 - Oversized STDERR Buffer Denial of Service // source: https://www.securityfocus.com/bid/5787/info Apache is prone to a denial of service condition when an excessive amount of data is written to stderr. This condition reportedly occurs when the amount of data written to stderr is...

CVE-2002-0725

NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage activities via a hard link to the target file, which causes the link to be recorded in the audit trail instead of the target file...