OpenBSD Local Root Compromise

ZOOM International Security Advisory OpenBSD local root compromise Systems affected: OpenBSD all version, OpenBSD Current prior April 8, 2002 Risk: High Date: April 11, 2002 Legal Notice: This advisory is copyright c ZOOM International. Disclaimer: Information contained in this advisory are...

CVE-1999-1021

NFS on SunOS 4.1 through 4.1.2 ignores the high order 16 bits in a 32 bit UID, which allows a local user to gain root access if the lower 16 bits are set to 0, as fixed by the NFS jumbo patch upgrade...

Another local root vulnerability during installation of Tarantella Enterprise 3.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Larry W. Cashdollar Vapid Labs 2/18/2002 Another local root vulnerability during installation of Tarantella Enterprise 3. During installation a "twirling / | - " text graphic is displayed you remember them from the shareware games in DOS days.. they...

Hanterm 3.3 - Local Buffer Overflow (1)

Hanterm 3.3 - Local Buffer Overflow 1 // source: https://www.securityfocus.com/bid/4050/info Hanterm is a replacement for xterm which includes Hangul support, used for Korean language systems. A buffer overflow error exists in hanterm. If it is called locally with a maliciously constructed...

sastcpd 8.0 'authprog' local root vulnerability

Hi, Several environment variable problems exist in the 'SAS Job Spawner for Open Systems version 8.00'. No other releases of the software were available to test. Sorry. authprog vulnerability ---------------------- The daemon passes a user-defined environment variable, 'authprog', to execve. This...

FreeBSD-SA-02:08.exec

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:08 Security Advisory FreeBSD, Inc. Topic: race condition during exec may allow local root compromise Category: core Module: kernel Announced: 2002-01-24 Credits: Logan...

uucp --config patch -- not sufficient

Problem: uucp patch from RedHat possibly others prevents original exploit, but not variations. Severity: Potential for local root on some distributions, uucp.uucp on others. https://bugzilla.redhat.com/bugzilla/showbug.cgi?id=54466 I had seen this report some time ago, and thought: "Good. They've...

NetBSD Security Advisory 2002-001 Close-on-exec, SUID and ptrace(2)

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2002-001 ================================= Topic: Close-on-exec, SUID and ptrace2 Version: NetBSD-current: prior to January 14, 2002 NetBSD-1.5.: affected up to and including 1.5.2 NetBSD-1.4.: affected up to and including 1.4.3 Severity...

[SECURITY] [DSA 101-1] New sudo packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 101-1 [email protected] http://www.debian.org/security/ Martin Schulze January 14th, 2002 - -------------------------------------------------------------------------- Package : sudo...

[SECURITY] [DSA 101-1] New sudo packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 101-1 [email protected] http://www.debian.org/security/ Martin Schulze January 14th, 2002 - -------------------------------------------------------------------------- Package : sudo...

CDRDAO 1.1.x - Home Directory Configuration File Symbolic Link (4)

CDRDAO 1.1.x - Home Directory Configuration File Symbolic Link 4 source: https://www.securityfocus.com/bid/3865/info CDRDAO is a freely available, open source CD recording software package available for the Unix and Linux Operating Systems. It is maintained by Andreas Mueller. When CDRDAO saves...

[SECURITY] [DSA-095-1] gpm (gpm-root) format string vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-095-1 [email protected] http://www.debian.org/security/ Robert van der Meulen December 27, 2001 - ------------------------------------------------------------------------ Package : gpm Problem...

New Advisory + Exploit

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++GOBBLES+SECURITY+RESEARCH+TEAM+INCORPORATED+++++++++++++++++ ALERT! ALERT! FREEBSD LOCAL ROOT VULNERABILITY! ALERT! ALERT! ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ include...

[SECURITY] [DSA-092-1] local root in wmtv

Package : wmtv Problem type : local root exploit Debian-specific: no Nicolas Boullis found a nasty security problem in the wmtv a dockable video4linux tv player for windowmaker package as distributed in Debian GNU/Linux 2.2. wmtv can optionally run a command if you double-click on the tv window...

[SECURITY] [DSA-092-1] local root in wmtv

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------------ Debian Security Advisory DSA-092-1 [email protected] http://www.debian.org/security/ Wichert Akkerman December 6, 2001 -...

UNICOS LOCAL HOLE ALL VERSIONS

CRAY UNICOS NQSD FORMAT BUG LOCAL ROOT COMPROMISE ALL VERSIONS MICKEY MOUSE HACKING SQUADRON ADVISORY : 1 DISCLAIMER ---------- We are a collective group of security professionals who want to remain nameless due to the various legal and corporate red tape which now surrounds the issue of disclosu...

Advisory: Berkeley pmake

Problem description ---------------------- There is a format string bug in the Berkeley's pmake 2.1.33 and below parallel make package as well as a buffer overflow problem. Pmake is suid root on various Linux distributions and uses root privileges for binding to low TCP ports. The ordinary...

SuSE Linux 6.4/7.0/7.1/7.2 Berkeley Parallel Make - Shell Definition Format String

// source: https://www.securityfocus.com/bid/3572/info Parallel Make pmake is a freely available version of the make program, originally distributed with Berkeley Unix. It is designed to execute Makefiles and build programs. pmake is not typically setuid root, although some Linux distributions...

gm4 format strings on OSX

This in itself is not an issue due to the lack of a suid bit... however if I remember correctly there were a few linux suid root binaries that were reliant upon m4 in some way or another thus making them vulnerable to a local root expoit. This is on osx 10.1. OSXBOX: elguapo ls -al which m4...

[SECURITY] [DSA 083-1] New procmail packages fix insecure signal handling

-------------------------------------------------------------------------- Debian Security Advisory DSA 083-1 [email protected] http://www.debian.org/security/ Martin Schulze October 18th, 2001 - -------------------------------------------------------------------------- Package : procmail...