26 matches found
CVE-1999-0773
Buffer overflow in Solaris lpset program allows local users to gain root access...
EUVD-2000-0316
Malware in sbrugna...
EUVD-1999-0754
Malware in sbrugna...
Solaris 2.6/7.0 lpset -r Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. However, when supplied a...
Solaris 2.6/7.0 lpset -r Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. However, when supplied a...
Solaris 2.6/7.0 lpset -r Buffer Overflow Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. However, when supplied a...
Sun Solaris <= 7.0 lpset Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/251/info A stack buffer overflow vulnerability in the handling of the -a command in the lpset program allows arbitrary execution of code with root privileges. The lpset utility sets printing configuration information in t...
CVE-2000-0317: Undefined Security Weakness
Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option...
lpset.overflow
Here's an overflow exploit that works on a non-exec stack on x86 boxes. It demonstrates how it is possible to thread together several libc calls. I have not seen any other exploits for x86 that have done this.. for the lpset bug in sol7 x86. Tim N. define BASE 0xdff40000 define STACK 0x8047e30...
Solaris/SPARC 2.7 lpset exploit (well not likely !)
Hi, lpset seems to use strcat to pass the argument for -r flag /usr/lib/print/lib/../../../../tmp/foo and appends .so to the end. in this case /tmp/foo.so is going to be dlopen but there is a special case /usr/lib/print/lib directory has to exist. xploit shell script is attached. $ uname -a SunOS...
Еще одна дыра в lpset
Вызывает динамическая библиотека задаваемая пользователем. Подменив библиотеку пользователь может получить права root...
Переполнение буфера в lpset под Solaris
32-байтное переполнение буфера...
Solaris 7 x86 lpset exploit.
Solaris 7 x86 /usr/bin/lpset overflow, there is a small overflow32 bytes in lpset which will yield root access if properly exploited. There is a sparc version avail for this bug, the bug was discovered by duke some time ago. I am releasing this exploit because of a copy-cat exploit on hack.co.za...
Solaris 2.67.0 - lpset -r Local Buffer Overflow (3)
Solaris 2.67.0 - lpset -r Local Buffer Overflow 3 / source: https://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. However...
Solaris 2.67.0 - lpset -r Local Buffer Overflow (2)
Solaris 2.67.0 - lpset -r Local Buffer Overflow 2 // source: https://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. Howeve...
Solaris 2.67.0 - lpset -r Local Buffer Overflow (1)
Solaris 2.67.0 - lpset -r Local Buffer Overflow 1 // source: https://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. Howeve...
Solaris 2.6/7.0 - 'lpset -r' Local Buffer Overflow (1)
// source: https://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. However, when supplied a well crafted buffer containing...
Solaris 2.6/7.0 - 'lpset -r' Local Buffer Overflow (2)
// source: https://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. However, when supplied a well crafted buffer containing...
Solaris 2.6/7.0 - 'lpset -r' Local Buffer Overflow (3)
/ source: https://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. However, when supplied a well crafted buffer containing...
