1417 matches found
Security advisory: LSF 5.1 local root exploit
Security Advisory 22 May 2003 Local root in LSF 5.1 Name: Load Sharing Facility version 5.1 Severity: High Vendor URL: http://www.platform.com Author: Tomasz Grabowski [email protected] Vendor notified: 25 Feb 2003 Vendor response: 25 Feb 2003 Vendor fix: 19 Mar 2003 Commercial: I'm looking for ...
[RHSA-2003:169-01] Updated lv packages fix vulnerability
--------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated lv packages fix vulnerability Advisory ID: RHSA-2003:169-01 Issue date: 2003-05-16 Updated on: 2003-05-16 Product: Red Hat Linux Keywords: local root exploit Cross references:...
CdRecord Version <= 2.0 Mandrake local root exploit
Exploit for linux platform in category local exploits =================================================== CdRecord Version = 2.0 Mandrake local root exploit =================================================== !/usr/bin/perl Cdrecord version 2.0 and local root exploit. email protected buffer$ perl...
Cdrecord local root exploit.
Priv8security.com Hi, here it is local root exploit cdrecord format string bug Cdrecord come suid root by default on mandrake distro and it can be executed by anybody. wsxz@localhost wsxz$ ls -l /usr/bin/cdrecord -rwsr-sr-x 1 root cdwriter 278156 Jan 6 07:2 /usr/bin/cdrecord here goes the code or...
cdrtools2.0 Format String Vulnerability
---------------------------------------------------------------------------- PACKAGE : cdrtools VERSION : 2.0 SUMMARY : Format String SEVERITY : local root exploit if suid on several distros DATE: : 2003-05-05 ---------------------------------------------------------------------------- Hi, i woul...
CdRecord Version <= 2.0 Mandrake local root exploit
No description provided by source. !/usr/bin/perl Cdrecord version 2.0 and local root exploit. wsxz@localhost buffer$ perl priv8cdr.pl 4 Using target number 4 Using Mr .dtors 0x808c82c Cdrecord 2.0 i586-mandrake-linux-gnu scsibus: -1 target: -1 lun: -1 Warning: Open by 'devname' is unintentional...
Firebird 1.0.2 FreeBSD 4.7-RELEASE Local Root Exploit
Exploit for bsd platform in category local exploits ===================================================== Firebird 1.0.2 FreeBSD 4.7-RELEASE Local Root Exploit ===================================================== / DSR-firebird.c ------------------------------- Tested on: Firebird 1.0.2 FreeBSD...
SAP database local root vulnerability during installation. (fwd)
This is an older moot vulnerability that I discovered which was never released, the vendor has fixed it. It is similar to what KF at snosoft discovered recently in the current version of SAPDB. Vapid Labs SAP database local root vulnerability during installation. December 10, 2002 I. BACKGROUND S...
Qpopper v4.0.x poppassd local root exploit
======================================== INetCop Security Advisory 2003-0x82-016 ======================================== Title: Qpopper v4.0.x poppassd local root exploit 0x01. Description Qpopper poppassd is a program that changes system passwords thus allowing users to change their mail...
Qpopper 4.0.x poppassd Local Root Exploit
Exploit for linux platform in category local exploits ========================================= Qpopper 4.0.x poppassd Local Root Exploit ========================================= / Title: Qpopper v4.0.x poppassd local root exploit. Exploit code: 0x82-Local.Qp0ppa55d.c -- ./0x82-Local.Qp0ppa55d -...
Qpopper 4.0.x - poppassd Privilege Escalation
Qpopper 4.0.x - poppassd Privilege Escalation / Title: Qpopper v4.0.x poppassd local root exploit. Exploit code: 0x82-Local.Qp0ppa55d.c -- ./0x82-Local.Qp0ppa55d -u x82 -p mypasswd Qpopper v4.0.x poppassd local root exploit. by Xpl017Elz / include include include include define BUFSZ 0x82 define...
Qpopper 4.0.x - 'poppassd' Privilege Escalation
/ Title: Qpopper v4.0.x poppassd local root exploit. Exploit code: 0x82-Local.Qp0ppa55d.c -- ./0x82-Local.Qp0ppa55d -u x82 -p mypasswd Qpopper v4.0.x poppassd local root exploit. by Xpl017Elz / include include include include define BUFSZ 0x82 define DPOPPASS "/usr/local/bin/poppassd" define DNAM...
ChiTeX/ChiLaTeX unsafe set-user-id root
Niels Heinen reports that ChiTeX installs set-user-id root executables that invoked system3 without setting up the environment, trivially allowing local root compromise...
VapidSAP.txt
Vapid Labs SAP database local root vulnerability during installation. December 10, 2002 I. BACKGROUND SAP DB is a Free Enterprise database http://www.sapdb.org. An exploitable race condition exists during installation that can be won to yield root to a local malicous user. An executable is world...
Mac OS X <= 10.2.4 DirectoryService (PATH) Local Root Exploit
Exploit for macOS platform in category local exploits ============================================================= Mac OS X include include include int mainint argc, char argv char ORIGPATH; int temp; if argc 2 if geteuid == 0 printf"euid is root.\n"; setuid0; execl"/bin/bash", "bash", NULL;...
[SECURITY] [DSA 267-2] New lpr packages fix local root exploit (potato)
-------------------------------------------------------------------------- Debian Security Advisory DSA 267-2 [email protected] http://www.debian.org/security/ Martin Schulze April 15th, 2003 http://www.debian.org/security/faq -...
Linux Kernel < 2.4.20 Module Loader Local Root Exploit
Exploit for linux platform in category local exploits ====================================================== Linux Kernel include include include include include include include include include include include include define TMPSIZE 4096 define FMAX 768 define UIDNUM 6 define MMSIZE 40961 define...
SRT2003-04-01-1231 - Progress DLC overflows
Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...
Apple Mac OSX 10.x - DirectoryService Denial of Service
Apple Mac OSX 10.x - DirectoryService Denial of Service // source: https://www.securityfocus.com/bid/7323/info MacOSX DirectoryService has been reported prone to a denial of service vulnerability. It has been reported that a remote attacker may trigger an exception in DirectoryService by repeated...
DEBIAN-CVE-2003-0144
Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as 1 request ID or 2 user name...