vvfreebsd.txt

Georgi Guninski security advisory 48, 2001 FreeBSD 4.3 local root, yet Linux and BSD much better than Windows Systems affected: FreeBSD 4.3 and probably earlier versions. Risk: High Date: 10 July 2001 Legal Notice: This Advisory is Copyright c 2001 Georgi Guninski. You may distribute it unmodifie...

FreeBSD 4.3 local root, yet Linux and *BSD much better than Windows

Georgi Guninski security advisory 48, 2001 FreeBSD 4.3 local root, yet Linux and BSD much better than Windows Systems affected: FreeBSD 4.3 and probably earlier versions. Risk: High Date: 10 July 2001 Legal Notice: This Advisory is Copyright c 2001 Georgi Guninski. You may distribute it unmodifie...

Security Advisory FreeBSD-SA-01:

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:42 Security Advisory FreeBSD, Inc. Topic: signal handling during exec may allow local root compromise Category: core Module: kernel Announced: 2001-07-10 Credits: Georgi...

FreeBSD-SA-01:42.signal

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:42 Security Advisory FreeBSD, Inc. Topic: signal handling during exec may allow local root compromise Category: core Module: kernel Announced: 2001-07-10 Revised:...

FreeBSD-SA-01:41.hanterm

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:41 Security Advisory FreeBSD, Inc. Topic: hanterm ports allow local root compromise Category: ports Module: ko-hanterm, ko-hanterm-xf Announced: 2001-07-09 Credits:...

Vixie Cron crontab 3.0 - Privilege Lowering Failure (2)

Vixie Cron crontab 3.0 - Privilege Lowering Failure 2 source: https://www.securityfocus.com/bid/2687/info Vixie cron is an implementation of the popular UNIX program that runs user-specified programs at periodic scheduled times. When a parsing error occurs after a modification operation, crontab...

Xvt 2.1 vulnerability

Package: xvt Version: 2.1 Problem type: Local root vulnerability Linux distribution: only tested on Debian ---- Introduction xvt is an X terminal-emulator that is designed to be more or less compatible with xterm while using much less swap space. It is mainly intended for use at sites which use...

Solaris 8 libsldap buffer overflow

DESCRIPTION The library implementing LDAP naming services on Solaris 8, libsldap, contains a buffer overflow in the initialization code. While parsing the environment variable LDAPOPTIONS, a fixed size buffer is used to store its contents which can be of any length. This is a straightforward buff...

Symlinks symlinks...this time KTVision

Hi ppl, the subject already states the problem: there is a symlink follow problem in the in many distributions suid root ktvision binary = 0.1.1-271. It is discouraging that nowadays such trivial symlink attacks are still possible. No comment anymore. In order to be complete: a bash script...

OpenBSD 2.9,2.8 local root compromise

Return-Path: pent.sci-nnov.ru!securityfocus.com!bugtraq-return-420-vlad=sandy.ru Received: from adm.sci-nnov.ru adm.sci-nnov.ru 193.125.71.2 by pent.sci-nnov.ru 8.11.3/Dmiter-4.1-AGK-1.1 with ESMTP id f5EFXH490671 for [email protected]; Thu, 14 Jun 2001 19:33:17 +0400 MSD Received: from...

man 1.5h10 + man 1.5i-4 exploits

This advisory is also stored, along with the exploits at http://generic.labs.pulltheplug.com/zen/ as man.txt ====================================================================== Local root from /usr/bin/man + /etc/cron.daily/makewhatis.cron Redhat 7.0 Redhat 7.1 on other distributions it may al...

Дырки в expert

Переполнение буфера и некорректный путь поиска файлов дает возможность локального root...

su-wrapper 1.1.1 Local root exploit.

/ - su-wrapper.c - / // / /usr/sbin/su-wrappersu-wrapper 1.1.1 local root exploit. / / / / Package Description: / / su-wrapper is an little util which lets special users execute / / processes under another uid/gid. / / / / Vulnerability Description: / / If a long line on the first argument is...

dqs 3.2.7 local root exploit.

Subject: dqs 3.2.7 local root exploit. Hello. DESCRIPTION: I found a buffer overflow vunerability on the /usr/bin/dsh dqs 3.2.7 package. I really don't know if this bug was discovered already. if thats right, then sorry =. If a long line on the first argument is gived, the program gives a SIGSEGV...

[SECURITY] [DSA-054-1] cron local root exploit

Package : cron Problem type : local root exploit Debian-specific: no A recent fall 2000 security fix to cron introduced an error in giving up privileges before invoking the editor. A malicious user could easily gain root access. This has been fixed in version 3.0pl1-57.3 or 3.0pl1-67 for unstable...

Vixie Cron crontab 3.0 - Privilege Lowering Failure (1)

Vixie Cron crontab 3.0 - Privilege Lowering Failure 1 source: https://www.securityfocus.com/bid/2687/info Vixie cron is an implementation of the popular UNIX program that runs user-specified programs at periodic scheduled times. When a parsing error occurs after a modification operation, crontab...

IRIX /usr/lib/print/netprint local root symbols exploit.

i haven't audited anything in some time. well, i just noticed this because i am doing a project with a name similar to "netprint" and i was wondering if it was at all related to what i was doing. it wasn't. but, i noticed it was setuid root and had a little bug. this bug takes advantage of the -n...

[SECURITY] [DSA 052-1] New sendfile packages fix root exploit

---------------------------------------------------------------------------- Debian Security Advisory DSA 052-1 [email protected] http://www.debian.org/security/ Martin Schulze April 23, 2001 - ---------------------------------------------------------------------------- Package : sendfile...

[SECURITY] [DSA 050-1] New version sendfile fix local root exploit

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------------- Debian Security Advisory DSA 050-1 [email protected] http://www.debian.org/security/ Martin Schulze April 20, 2001 -...

PT-2001-1001 · Openssh +1 · Openssh-Askpass-Gnome +5

Name of the Vulnerable Software and Affected Versions: OpenSSH versions 3.0.1 and earlier openssh-server-2.9p2 openssh-clients-2.9p2 openssh-2.9p2 openssh-askpass-2.9p2 openssh-askpass-gnome-2.9p2 ssh-askpass-ptk Description: The issue concerns multiple vulnerabilities in OpenSSH and related...