Sendmail .forward File Local Privilege Escalation

Binary data 2009.prm...

Mandrake Linux Security Advisory : man (MDKSA-2003:054)

A difficult to exploit vulnerability was discovered in versions of man prior to 1.5l. A bug exists in man that could cause a program named 'unsafe' to be executed due to a malformed man file. In order to exploit this bug, a local attacker would have to be able to get another user to read the...

multiple remote & local buffer overflows discovered in Drcatd

Zone-h Security Advisory Date of discovery : 24 june 2004 Date of release : 25 june 2004 Bug found by Khan Shirani [email protected] http://www.zone-h.org --------------------------------------- Software : Drcatd Bugs : Buffer Overflows , Remote and local multiple Risk : low Platform : nix...

[Full-Disclosure] [SECURITY] [DSA 500-1] New flim packages fix insecure temporary file creation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 500-1 [email protected] http://www.debian.org/security/ Matt Zimmerman May 1st, 2004 http://www.debian.org/security/faq -...

Solaris 10.x ESRI Arcgis Local Root Format String Exploit

Exploit for solaris platform in category local exploits ========================================================= Solaris 10.x ESRI Arcgis Local Root Format String Exploit ========================================================= / ESRI 9.x Arcgis local root format string exploit Copyright Kevin...

Arbitrary file overwriting in Unreal engine through UMOD

Luigi Auriemma Application: Unreal engine http://unreal.epicgames.com Versions: any game based on this engine that supports the UMOD installation. An example are Unreal Tournament = 451b and Unreal Tournament 2003 = 2225. A full list of vulnerable games is not available. Platforms: Windows and...

[Full-Disclosure] [SECURITY] [DSA 488-1] New logcheck packages fix insecure temporary directory

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 488-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 16th, 2004 http://www.debian.org/security/faq -...

KLA10355 LPE vulnerability in Symantec

An unspecified vulnerability was found in Symantec products. By exploiting this vulnerability malicious users can gain system privileges. This vulnerability can be exploited locally via an unknown vector. Original advisories Symantec advisory Exploitation Related products...

KLA10362 OSI vulnerability in The Bat

An insecure ACL was found in The Bat! By exploiting this vulnerability malicious users can read e-mail messages. This vulnerability can be exploited locally. Original advisories - Exploitation Public exploits exist for this vulnerability. Related products The-Bat! CVE list CVE-2003-1133 warning...

CVE-2003-0854

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd...

CORE-2003-0531: Multiple IBM DB2 Stack Overflow Vulnerabilities

Core Security Technologies Advisory http://www.coresecurity.com Multiple IBM DB2 Stack Overflow Vulnerabilities Date Published: 2003-09-18 Last Update: 2003-09-18 Advisory ID: CORE-2003-0531 Bugtraq ID: 8552, 8553 CVE Name: CAN-2003-0758, CAN-2003-0759 Title: Multiple IBM DB2 Stack Overflow...

Multiple IBM DB2 Stack Overflow Vulnerabilities

Advisory ID Internal CORE-2003-0531 Vulnerability Information: Date Published: 2003-09-18 Last Update: 2003-09-17 Advisory ID: CORE-2003-0531 Bugtraq ID:8552, 8553 CVE Name:CAN-2003-0758, CAN-2003-0759 Title: Multiple IBM DB2 Stack Overflow Vulnerabilities Class: Boundary Error Condition Buffer...

IBM DB2 db2dart - Buffer Overflow

IBM DB2 db2dart - Buffer Overflow source: https://www.securityfocus.com/bid/8552/info It has been reported that the IBM DB2 db2dart utility is prone to locally exploitable buffer overflow vulnerability. A local attacker, who can authenticate or has access as the db2as user, may exploit this issue...

SCO OpenServer 5.0.x - mana PATH_INFO Privilege Escalation

SCO OpenServer 5.0.x - mana PATHINFO Privilege Escalation source: https://www.securityfocus.com/bid/8618/info It has been reported that SCO OpenServer Inertnet Manager 'mana' process is prone to a privilege escalation issue allow local users to execute arbitrary code with elevated privileges. man...

XBlast 2.6.1 - HOME Environment Local Buffer Overflow

XBlast 2.6.1 - HOME Environment Local Buffer Overflow // source: https://www.securityfocus.com/bid/8296/info XBlast is contains a locally exploitable buffer overflow vulnerability due to insufficient bounds checking of data supplied via the HOME environment variable. Successful exploitation would...

Microsoft Windows Server 2000 - CreateFile API Named Pipe Privilege Escalation (1)

Microsoft Windows Server 2000 - CreateFile API Named Pipe Privilege Escalation 1 // source: https://www.securityfocus.com/bid/8128/info It has been reported that Microsoft Windows does not properly handle named pipes through the CreateFile API. Because of this, an attacker may be able to gain...

[SECURITY] [DSA-329-1] New osh packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 329-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 20th, 2003 http://www.debian.org/security/faq -...

CVE-2003-0372

Signed integer vulnerability in libnasl in Nessus before 2.0.6 allows local users with plugin upload privileges to cause a denial of service core dump and possibly execute arbitrary code by causing a negative argument to be provided to the insstr function as used in a NASL script...

WinMX 2.6 - Design Error

WinMX 2.6 - Design Error WinMX Design Error Vendor: Frontcode Technologies Product: WinMX Version: = 2.6 Website: http://www.winmx.com/ BID: 7771 Description: WinMX 2.6 is an older version of the popular file sharing client WinMX. While the current version is 3.31, 2.6 still remains quite popular...

WinMX < 2.6 - Design Error

WinMX Design Error Vendor: Frontcode Technologies Product: WinMX Version: = 2.6 Website: http://www.winmx.com/ BID: 7771 Description: WinMX 2.6 is an older version of the popular file sharing client WinMX. While the current version is 3.31, 2.6 still remains quite popular. Especially amongst user...