Linux Kernel 2.2.x - 2.4.x ptrace/kmod Local Root Exploit

Exploit for linux platform in category local exploits ========================================================= Linux Kernel 2.2.x - 2.4.x ptrace/kmod Local Root Exploit ========================================================= / Linux kernel ptrace/kmod local root exploit This code exploits a ra...

[SECURITY] [DSA 270-1] New Linux kernel packages (mips + mipsel) fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 270-1 [email protected] http://www.debian.org/security/ Martin Schulze March 27sh, 2003 http://www.debian.org/security/faq -...

linux kmod/ptrace bug - details

Hello There are many discussions on slashdot for example on the recent linux ptrace & kmod bug. I'll try to clarify what is this all about. It's a local root vulnerability. It's exploitable only if: 1. the kernel is built with modules and kernel module loader enabled and 2...

xscreensaver exploit for Redhat 7.3

I think you don't need other comments: / Tested on rh 7.3 using XFree86 xscreensaver vulnerability AUTHORS: Angelo Rosiello Guilecool & deka REQUIRES: X must be run! EFFECTS: local root exploit! deka is leet brother, thank you : MAIL: [email protected] / include stdio.h include string.h include...

XFree86 4.2 - XLOCALEDIR Local Buffer Overflow (2)

XFree86 4.2 - XLOCALEDIR Local Buffer Overflow 2 // source: https://www.securityfocus.com/bid/7002/info Several XFree86 utilities may be prone to a buffer overflow condition. The vulnerability exists due to insufficient boundary checks performed by these utilities when referencing the XLOCALEDIR...

XFree86 4.2 - 'XLOCALEDIR' Local Buffer Overflow (3)

// source: https://www.securityfocus.com/bid/7002/info Several XFree86 utilities may be prone to a buffer overflow condition. The vulnerability exists due to insufficient boundary checks performed by these utilities when referencing the XLOCALEDIR environment variable. A local attacker can exploi...

Mandrake 9.0 local root exploit

------------------------------------------------------------------------------------------------------------------ Priv8 Security - www.priv8security.com priv8mdk90.tar.gz - Mandrake 9.0 local root exploit Based on Idefense adv. http://www.idefense.com/advisory/01.21.03.txt Greets to : coideloko,...

[SECURITY] [DSA 252-1] New slocate packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 252-1 [email protected] http://www.debian.org/security/ Martin Schulze February 21st, 2003 http://www.debian.org/security/faq -...

Cpanel 5 and below remote command execution and local root vulnerabilities

Products: Cpanel 5 and below http://www.cpanel.net Date: 19th February 2003 Author: pokleyzz pokleyzzatscan-associates.net Contributors: sk skatscan-associates.net shaharil shaharilatscan-associates.net Special thanks: Skywizard skywizardatmybsd.org.my Description =========== Cpanel is web hostin...

Local root vuln in SuSE 8.0 plptools package

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Vulnerability Advisory Distribution: SuSE 8.0 possibly other versions, eg. 7.x/8.1 Package name: plptools-0.6mjg-161.i386.rpm Impact: Local root Advisory ID: CLIVITT-2003-2 Author: Carl Livitt carl at learningshophull.co.uk Date: January 29th...

iDEFENSE Security Advisory 01.21.03: Buffer Overflows in Mandrake Linux printer-drivers Package

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 01.21.03: Buffer Overflows in Mandrake Linux printer-drivers Package http://www.idefense.com/advisory/01.21.03.txt January 21, 2003 I. BACKGROUND MandrakeSoft Inc.'s Mandrake Linux includes the printer-drivers package in mos...

CVE-2002-1367

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need...

HP-UX 11 - Software Distributor Lang Environment Variable Local Buffer Overrun

HP-UX 11 - Software Distributor Lang Environment Variable Local Buffer Overrun // source: https://www.securityfocus.com/bid/8986/info HP has reported that some Software Distributor SD utilities are prone to a locally exploitable buffer-overrun vulnerability. Affected utilities include swinstall1M...

HP-UX 11.0/11.11 swxxx Local Root Shell Exploit

Exploit for hp-ux platform in category local exploits =============================================== HP-UX 11.0/11.11 swxxx Local Root Shell Exploit =============================================== / Program : xhpux11isw.c Use : HP-UX 11.11/11.0 exploit swxxx to get local root shell. Complie : cc...

HP-UX 11.011.11 - swxxx Privilege Escalation

HP-UX 11.011.11 - swxxx Privilege Escalation / Program : xhpux11isw.c Use : HP-UX 11.11/11.0 exploit swxxx to get local root shell. Complie : cc xhpux11isw.c -o xsw;./xsw not use gcc for some system Usage : ./xsw off Tested : HP-UX B11.11 & HP-UX B11.0 Author : watercloud @ xfocus.org Date :...

HP-UX 11.0/11.11 - 'swxxx' Privilege Escalation

/ Program : xhpux11isw.c Use : HP-UX 11.11/11.0 exploit swxxx to get local root shell. Complie : cc xhpux11isw.c -o xsw;./xsw not use gcc for some system Usage : ./xsw off Tested : HP-UX B11.11 & HP-UX B11.0 Author : watercloud @ xfocus.org Date : 2002-12-11 Note : Use as your own risk !! / inclu...

SAP database local root via symlink

This local attack upon SAP is based on sapdb-server-linux-32bit-i386-73029.tgz it is currently unknown if this affects other SAP flavors. elguapo@rh8 pgm$ pwd /usr/sapdb/depend/pgm elguapo@rh8 pgm$ ls -al lserver -rwsrwxr-x 1 root sapdb 15673 Oct 22 10:42 lserver Using ltrace we can see an attemp...

grpck-expl.pl

Hi packetstorm dudez! --- start here --- !/usr/bin/perl www.uhagr.org - [email protected] This is only a Proof of concept. /usr/sbin/grpck is not suid root by default. castle: /usr/sbin/grpck perl -e 'print "X"x2900' Segmentation fault castle: my $usage = Example: ./grpck-expl.pl 1 TARGETS: 1...

[SECURITY] [DSA 189-1] New luxman packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 189-1 [email protected] http://www.debian.org/security/ Martin Schulze November 6th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 189-1] New luxman packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 189-1 [email protected] http://www.debian.org/security/ Martin Schulze November 6th, 2002 http://www.debian.org/security/faq -...