1417 matches found
[SECURITY] [DSA 427-1] New Linux 2.4.17 packages fix local root exploit (mips+mipsel)
-------------------------------------------------------------------------- Debian Security Advisory DSA 427-1 [email protected] http://www.debian.org/security/ Martin Schulze January 19th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 417-2] New Linux 2.4.18 packages fix local root exploit (alpha)
-------------------------------------------------------------------------- Debian Security Advisory DSA 417-2 [email protected] http://www.debian.org/security/ Martin Schulze January 9th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 417-2] New Linux 2.4.18 packages fix local root exploit (alpha)
-------------------------------------------------------------------------- Debian Security Advisory DSA 417-2 [email protected] http://www.debian.org/security/ Martin Schulze January 9th, 2004 http://www.debian.org/security/faq -...
Slackware 8.1 kernel security update
New kernels are available for Slackware 8.1 containing a backported fix from a bounds-checking problem in the kernel's mremap call which could be used by a local attacker to gain root privileges. This fix was previously issued for Slackware 9.0, 9.1, and -current SSA:2004-006-01. Sites running...
[SECURITY] [DSA 417-1] New Linux 2.4.18 packages fix local root exploit (powerpc+alpha)
-------------------------------------------------------------------------- Debian Security Advisory DSA 417-1 [email protected] http://www.debian.org/security/ Martin Schulze January 7th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 417-1] New Linux 2.4.18 packages fix local root exploit (powerpc+alpha)
-------------------------------------------------------------------------- Debian Security Advisory DSA 417-1 [email protected] http://www.debian.org/security/ Martin Schulze January 7th, 2004 http://www.debian.org/security/faq -...
DSA-417 linux-kernel-2.4.18-powerpc+alpha - missing boundary check
Bulletin has no description...
HP-UX B11.11 - usrbinct Format String Privilege Escalation
HP-UX B11.11 - usrbinct Format String Privilege Escalation / File : xhp-ux11inlsct.c Usage : cc xhp-ux11inlsct.c -o xct ; ./xct Purpose : Get a local rootshell from /usr/bin/ct,using HP-UX location language format string bug. Author : watercloud xfocus org Tested : On HP-UX B11.11 . / include...
Linux Kernel <= 2.4.22 (do_brk) Local Root Exploit (working)
Exploit for linux platform in category local exploits ============================================================ Linux Kernel Further research and exploit development by Wojciech Purczynski and Paul Starzetz. c 2003 Copyright by IhaQueR and cliph. All Rights Reserved. COPYING, PRINTING,...
Linux Kernel 2.4.22 ""do_brk()"" local Root Exploit (PoC)
No description provided by source. ; Christophe Devine devine at cr0.net and Julien Tinnes julien at cr0.org ; ; This exploit uses sysbrk directly to expand his break and doesn't rely ; on the ELF loader to do it. ; ; To bypass a check in sysbrk against available memory, we use a high ; virtual...
Linux Kernel 2.4.22 "do_brk()" local Root Exploit (PoC)
Exploit for linux platform in category local exploits ======================================================= Linux Kernel 2.4.22 "dobrk" local Root Exploit PoC ======================================================= ; Christophe Devine devine at cr0.net and Julien Tinnes julien at cr0.org ; ; Th...
Important: Red Hat Security Advisory: kernel security update
Updated kernel packages are now available that fix a security vulnerability allowing local users to gain root privileges. The Linux kernel handles the basic functions of the operating system. A flaw in bounds checking in the dobrk function in the Linux kernel versions 2.4.22 and previous can allo...
TerminatorX <= 3.81 stack overflow local root exploit
Exploit for linux platform in category local exploits ===================================================== TerminatorX -b -s -r : no bruteforcing, try to execute shellcode with as return address -b: enables bruteforcing -s: bruteforces by using return address from to 0x00000000 Example:...
TerminatorX 3.8 - Multiple Command-Line and Environment Buffer Overrun Vulnerabilities (2)
TerminatorX 3.8 - Multiple Command-Line and Environment Buffer Overrun Vulnerabilities 2 // source: https://www.securityfocus.com/bid/8993/info It has been reported that TerminatorX may be prone to multiple vulnerabilities when handling command-line and environment variable data. As a result, an...
TerminatorX 3.8 - Multiple Command-Line and Environment Buffer Overrun Vulnerabilities (3)
// source: https://www.securityfocus.com/bid/8993/info It has been reported that TerminatorX may be prone to multiple vulnerabilities when handling command-line and environment variable data. As a result, an attacker may be capable of exploiting the application in a variety of ways to execute...
MacOS X privilege escalation
There are conditions it's possible to obtains local root access having access to USB keyboard during boot process...
Local root vuln in kpopup
A local root vuln exists in Kpopup version 0.9.1latest and proberly all other versions. It is avaliable from http://www.henschelsoft.de/kpopupen.html main site http://www.freebsd.org/ports/net.html and many other places if you search kpopup on google. I. BACKGROUND Kpopup is a KDE program for...
kpopup 0.9.x - Privileged Command Execution
kpopup 0.9.x - Privileged Command Execution // source: https://www.securityfocus.com/bid/8915/info It has been alleged that it is possible for local attackers to gain root privileges through kpopup, which is is installed setuid root by default. According to the report, kpopup uses the system3...
kpopup -- local root exploit and local denial of service
Mitre CVE reports: Format string vulnerability in main.cpp in kpopup 0.9.1-0.9.5pre2 allows local users to cause a denial of service segmentation fault and possibly execute arbitrary code via format string specifiers in command line arguments. misc.cpp in KPopup 0.9.1 trusts the PATH variable whe...
Musicqueue 0.91.01.1 - Multiple Buffer Overrun Vulnerabilities
Musicqueue 0.91.01.1 - Multiple Buffer Overrun Vulnerabilities // source: https://www.securityfocus.com/bid/8903/info Multiple buffer overrun vulnerabilities have been discovered in Musicqueue. Both issues stem from the lack of bounds checking when passing user-supplied input to the sprintf libc...