ProFTPd - ftpdctl pr_ctrls_connect Local Overflow

ProFTPd - ftpdctl prctrlsconnect Local Overflow / This is simple local exploit Proof of Concept? for local bug in ProFTPd not in default options must be configured with option --enable-ctrls. Bug exist in func tion prctrlsconnect in file "src/ctrls.c", look: "src/ctrls.c" int prctrlsconnectconst...

Clearswift Mimesweeper Path Traversal Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------- SySS-Advisory: Clearswift Mimesweeper Path Traversal Vulnerability - ------------------------------------------------------------------- Problem discovered: July 27th 2004 Vendor...

Serv-U 3x - 5.x Local Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ================================================== Serv-U 3x - 5.x Local Privilege Escalation Exploit ================================================== / Hax0rcitos proudly presents Serv-u Local Exploit v3.x. tested also against last versio...

Mandrake Linux Security Advisory : vixie-cron (MDKSA-2001:050)

A recent security fix to cron introduced a new problem with giving up privileges before invoking the editor. A malicious local user could exploit this to gain root access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

SUSE-SA:2002:045: samba

The remote host is missing the patch for the advisory SUSE-SA:2002:045 samba. Samba developer Steve Langasek found a security problem in samba, the widely known free implementation of the SMB protocol. The error consists of a buffer overflow in a commonly used routine that accepts user input and...

Microsoft Windows Server 2000 - Utility Manager Privilege Escalation (MS04-019)

//by Cesar Cerrudo sqlsec at yahoo.com //Local elevation of priviliges exploit for Windows 2K Utility Manager second one!!!! //Gives you a shell with system privileges //If you have problems try changing Sleep values. include "stdio.h" include "windows.h" int mainint argc, char argv HWND lHandle,...

EudExploit_private.pl

Author: LibX [email protected] Date: 29-06-2004 Exploit : 1 Program: Eudora Tested on: v5.1 / v6.0.1.1 / v6.0.22 / v6.0.3 All English NT/2K/XP all service packs Exploit Type: Local Buffer overflow Shellcode: Shellcode to execute a command Shellcode version: v2.5 PRIVATE GENERIC How-tu-use:...

UNIX 7th Edition /bin/mkdir Local Buffer Overflow Exploit

Exploit for unix platform in category local exploits ========================================================= UNIX 7th Edition /bin/mkdir Local Buffer Overflow Exploit ========================================================= / Exploit for /bin/mkdir Unix V7 PDP-11. mkdir has a buffer overflow...

[Full-Disclosure] [SECURITY] [DSA 524-1] New rlpr packages fix multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 524-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 19th, 2004 http://www.debian.org/security/faq -...

CVE-2004-0524

The CVE-2004-0524 entry describes a buffer overflow in the chpasswd command of the Change_passwd plugin (before 4.0) used by SquirrelMail. The vulnerability allows local users to gain root privileges through a long user name. The NVD entry assigns a base score of 10.0 (HIGH) with local, low-compl...

CVE-2004-0402

CVE-2004-0402 concerns the xpcd package, specifically the xpcd-svga component, where a buffer overflow in the pcd_open function can copy user-supplied data into a fixed-size buffer. Connected advisories (Debian DSA-508, Mandrake MDKSA-2004:053, Ubuntu/Debian/NVD entries) confirm the vulnerability...

APSIS Pound 1.5 - Remote Format String

// source: https://www.securityfocus.com/bid/10267/info APSIS Pound has been found to be prone to a remote format string vulnerability. The problem presents itself when Pound handles certain requests containing embedded format string specifiers. Ultimately this vulnerability could allow for...

BulletProof FTP Server 2.4.0.31 Local Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ================================================================== BulletProof FTP Server 2.4.0.31 Local Privilege Escalation Exploit ================================================================== // //Privilege escalation in BulletProof...

[SECURITY] [DSA 489-1] New Linux 2.4.17 packages fix local root exploit (mips+mipsel)

-------------------------------------------------------------------------- Debian Security Advisory DSA 489-1 [email protected] http://www.debian.org/security/ Martin Schulze April 17th, 2004 http://www.debian.org/security/faq -...

BSD-Games 2.x - Mille Local Save Game File Name Buffer Overrun

// source: https://www.securityfocus.com/bid/10165/info bsd-games mille is prone to a locally exploitable buffer overrun vulnerability. This issue is due to insufficient bounds checking when the user inputs a file name when saving a game. This game is typically installed setgid games so may allow...

FirstClass Desktop 7.1 - Local Buffer Overflow

/ ++++++++++++++++++++++++++++++++++++++++++++++++++++ FirstClass Desktop 7.1 latest buffer overflow exploit Discovered and coded by I2S-LaB. URL : http://www.I2S-LaB.com contact : contactatI2S-LaB.com ++++++++++++++++++++++++++++++++++++++++++++++++++++ Compile it with cl.exe VC++6 / include voi...

[SECURITY] [DSA 462-1] New xitalk packages fix local group utmp exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 462-1 [email protected] http://www.debian.org/security/ Martin Schulze March 12th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 456-1] New Linux 2.2.19 packages fix local root exploit (arm)

-------------------------------------------------------------------------- Debian Security Advisory DSA 456-1 [email protected] http://www.debian.org/security/ Martin Schulze March 6th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 444-1] New Linux 2.4.17 packages fix local root exploit (ia64)

-------------------------------------------------------------------------- Debian Security Advisory DSA 444-1 [email protected] http://www.debian.org/security/ Martin Schulze February 20th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 438-1] New Linux 2.4.18 packages fix local root exploit (alpha+i386+powerpc)

-------------------------------------------------------------------------- Debian Security Advisory DSA 438-1 [email protected] http://www.debian.org/security/ Martin Schulze February 18th, 2004 http://www.debian.org/security/faq -...