BSD chpass - 'pw_error(3)' Local Privilege Escalation

/ TESO BSD chpass exploit - caddis greets: !teso, !w00w00, hert!, ozsecurity, plus613 / include char bsdshellcode = "\xeb\x16\x5e\x31\xc0\x8d\x0e\x89" "\x4e\x08\x89\x46\x0c\x8d\x4e\x08" "\x50\x51\x56\x50\xb0\x3b\xcd\x80" "\xe8\xe5\xff\xff\xff/bin/sh"; char ptmpshellcode =...

CVE-2000-0997

Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root privileges...

CVE-2000-0952

global.cgi CGI program in Global 3.55 and earlier on NetBSD allows remote attackers to execute arbitrary commands via shell metacharacters...

Linux news 9.12.00

Новое 2.2.18pre25 Похоже исправлен последний баг что означает возможно скорый выход 2.2.18release. Подробнее: http://linuxtoday.com/newsstory.php3?ltsn=2000-12-07-012-04-NW-KN Linux Kernel pre-patch 2.4.0 test12-pre7 Седьмой пререлиз двенадцатого тестового ядра Linux - Linux Kernel pre-patch 2.4....

CVE-2000-0997

CVE-2000-0997 describes a format-string vulnerability in the eeprom program used by OpenBSD and NetBSD (and possibly others), allowing a local attacker to gain root privileges. The root cause is a format-string flaw in the eeprom utility, enabling privilege escalation on affected systems. A patch...

CVE-2000-0997

Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root privileges...

Security Advisory 2000-015

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2000-015 ================================= Topic: format-string bugs in passwd/libutil Version: all releases up to and including 1.4.2 Severity: local root compromise possible Fixed: 2000/10/03 in -current and netbsd-1-5 branches...

Security Advisory 2000-012

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2000-012 ================================= Topic: buffer overflow in NIS hostname lookup code Version: 1.4.x: All versions prior to 1.4.3 fix will be in 1.4.3 1.5ALPHA: prior to June 30, 2000 fix will be in 1.5 current: prior to June 30,...

CVE-2000-0489

FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers...

CVE-2000-0489

Technical details are not publicly available in the provided connected documents. Monitor for updates; no exposed exploit details, affected versions, or root-cause specifics are supplied here.

CVE-2000-0440

NetBSD 1.4.2 and earlier are affected. The vulnerability allows remote attackers to cause a denial of service by sending a packet containing an unaligned IP timestamp option. The available documents confirm the affected product/version and the faulty IP timestamp option as the root cause, with Do...

CVE-2000-0440

NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option...

OpenBSD 2.7 / NetBSD 1.4.2 mopd buffer overflow

The mopd Maintenance Operations Protocol loader daemon implementation in OpenBSD 2.7 and NetBSD 1.4.2 includes a step in which the daemon receives a file name from a client elsewhere on the network. I found one point at which the client can overflow a buffer in the server by sending a long file...

CVE-2000-0574

Affected software: OpenBSD ftpd, NetBSD ftpd, ProFTPd, and Opieftpd. The issue is that untrusted format strings are not properly cleansed in setproctitle, allowing remote attackers to cause a denial of service or execute arbitrary commands. The connected Nessus document notes an attack scenario w...

CVE-2000-0462

ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which allows those users to access other files outside of their home directory...

CVE-2000-0456

NetBSD CVE-2000-0456 affects NetBSD 1.4.2 and earlier. The vulnerability stems from certain kernel system calls that do not yield the CPU, allowing local users to cause a denial of service (cpu-hog). The NVD/metrics indicate a low severity (CVSS v2 base score 2.1) with local attack vector and no ...

CVE-2000-0456

NetBSD 1.4.2 and earlier allows local users to cause a denial of service by repeatedly running certain system calls in the kernel which do not yield the CPU, aka "cpu-hog"...

CVE-2000-0462

CVE-2000-0462 concerns ftpd in NetBSD 1.4.2, where the daemon does not correctly parse entries in /etc/ftpchroot and fails to chroot the specified users. The underlying issue allows authenticated users to access files outside their home directory, compromising confidentiality. The available sourc...

CVE-2000-0157

NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process...

CVE-2000-0157

CVE-2000-0157 concerns NetBSD on VAX where a ptrace-based flaw lets local users gain privileges by modifying the PSL contents during debugging. The description identifies the affected vector as a local privilege escalation via the ptrace interface, but the provided documents do not specify a vend...