6471 matches found
Multiple ceterm terminal emulator multiple vulnerabilities
Elevated privileges are not correctly dropped...
Microsoft Windows Kernel Vulnerability
Overview A privilege elevation vulnerability exists in the way that the Windows' kernel processes certain access requests. This vulnerability could allow a logged on user to take complete control of the system. Description A locally authenticated user could potentially exploit a vulnerability in...
Microsoft font processing buffer overflow vulnerability
Overview A privilege elevation vulnerability exists in the way that Microsoft Windows processes certain fonts. This vulnerability could allow a logged on user to take complete control of the system. Description Due to an unchecked buffer in the processing of malicious fonts, a locally authenticat...
Microsoft Client Server Runtime System Vulnerability
Overview The Microsoft Client Server Runtime System CSRSS incorrectly validates certain messages potentially resulting in privilege elevation. Description CSRSS is the user-mode part of the Win32 subsystem. Win32.sys is the kernel-mode portion of the Win32 subsystem. The Win32 subsystem must be...
iDEFENSE Security Advisory 04.07.05: SGI IRIX gr_osview Information Disclosure Vulnerability
SGI IRIX grosview Information Disclosure Vulnerability iDEFENSE Security Advisory 04.07.05 http://www.idefense.com/application/poi/display?type=vulnerabilities April 7, 2005 I. BACKGROUND The grosview application is a setuid root application that provides a graphical display of usage of certain...
HP-UX PHSS_32176 : HP OpenView Operations (OVO), Remote Unauthorized Privilege Elevation (HPSBMA01092 SSRT4847 rev.2)
s700800 11.X OV OVO8.0X consolidated server A.08.01 : A potential security vulnerability has been identified with HP OpenView Operations which could allow an OVO operator to gain unauthorized elevated privileges on remote systems that are managed by OVO. %NASLMINLEVEL 70300 C Tenable Network...
HP-UX PHSS_32175 : HP OpenView Operations (OVO), Remote Unauthorized Privilege Elevation (HPSBMA01092 SSRT4847 rev.2)
s700800 11.00 OV ITO6.X intermediate server A.06.18 : A potential security vulnerability has been identified with HP OpenView Operations which could allow an OVO operator to gain unauthorized elevated privileges on remote systems that are managed by OVO. %NASLMINLEVEL 70300 C Tenable Network...
[Full-Disclosure] PaX privilege elevation security bug
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PaX privilege elevation security bug Severity: critical Description: unprivileged users can execute arbitrary code with the privileges of the target in any program they or other users can execute it is definitely exploitable for local users, remote...
phpbb -- privilege elevation and path disclosure
The phpbb developer group reports: phpBB Group announces the release of phpBB 2.0.13, the "Beware of the furries" edition. This release addresses two recent security exploits, one of them critical. They were reported a few days after .12 was released and no one is more annoyed than us, having to...
[Full-Disclosure] iDEFENSE Security Advisory 02.23.05: Sun Solaris kcms_configure Arbitrary File Corruption Vulnerability
Sun Solaris kcmsconfigure Arbitrary File Corruption Vulnerability iDEFENSE Security Advisory 02.23.05 www.idefense.com/application/poi/display?id=206&type=vulnerabilities February 23, 2005 I. BACKGROUND The kcmsconfigure utility is part of the Kodak Color Management System KCMS package that is...
HP-UX PHCO_29682 : HP-UX Running newgrp(1), Local Privilege Elevation (HPSBUX01102 SSRT4687 rev.2)
s700800 11.00 cumulative newgrp1 patch : A potential vulnerability has been identified with the HP-UX newgrp1 command that may allow authorized users to elevate privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted fro...
HP-UX PHCO_26385 : HP-UX Running newgrp(1), Local Privilege Elevation (HPSBUX01102 SSRT4687 rev.2)
s700800 11.11 newgrp1 cumulative patch : A potential vulnerability has been identified with the HP-UX newgrp1 command that may allow authorized users to elevate privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted fro...
Linux Kernel 2.4 uselib() Privilege Elevation Exploit
Exploit for linux platform in category local exploits ===================================================== Linux Kernel 2.4 uselib Privilege Elevation Exploit ===================================================== / Linux kernel 2.4 uselib privilege elevation exploit. original exploit source from...
[Full-Disclosure] OpenServer 5.0.6 OpenServer 5.0.7 : scosessoin local privilege elevation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SCO Security Advisory Subject: OpenServer 5.0.6 OpenServer 5.0.7 : scosessoin local privilege elevation Advisory number: SCOSA-2005.5 Issue date: 2005 January 25 Cross reference: sr886719 fz528461 erg712476 CAN-2003-1021 1. Problem Description A probl...
[Full-Disclosure] [AppSecInc Team SHATTER Security Advisory] Microsoft Windows LPC heap overflow
Microsoft Windows LPC heap overflow AppSecInc Team SHATTER Security Advisory http://www.appsecinc.com/resources/alerts/general/07-0001.html January 10, 2005 Credit: This vulnerability was discovered and researched by Cesar Cerrudo of Application Security, Inc. Risk Level: High Summary: A local...
[Full-Disclosure] Linux kernel uselib() privilege elevation, corrected
Hi all, first of all I must comply about the handling of this vulnerability that I reported to vendorsec. Obviously my code posted there has been stolen and plagiated in order to put the blame on Stefan Esser from Ematters and disturb the security community. I really apologize to Stefan Esser for...
isec-0021-uselib.txt
Synopsis: Linux kernel uselib privilege elevation Product: Linux kernel Version: 2.4 up to and including 2.4.29-pre3, 2.6 up to and including 2.6.10 Vendor: http://www.kernel.org/ URL: http://isec.pl/vulnerabilities/isec-0021-uselib.txt CVE: CAN-2004-1235 Author: Paul Starzetz Date: Jan 07, 2005...
Linux Kernel <= 2.4.29-rc2 uselib() Privilege Elevation
Exploit for linux platform in category local exploits ======================================================= Linux Kernel include include include include include include include include include include include include include include include include include include define strs s define xstrs str...
Linux 2.6 Kernel Capability LSM Module Local Privilege Elevation
Venustech AD-Lab www.venustech.com.cn Security Advisory Advisory: ADLAB-04003Linux 2.6. Kernel Capability LSM Module Local Privilege Elevation Authors: [email protected] Release: 09/12/04 Class: Design Error Remote: No, local Vulnerable: Linux kernel 2.6. Linux kernel 2.5.72-lsm1...
Security Bulletin SSRT4687 rev.0 HP-UX newgrp(1) local privilege elevation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01102 REVISION: 0 SSRT4687 rev.0 HP-UX newgrp1 local privilege elevation NOTICE: There are no restrictions for distribution of this Bulletin provided that it remains complete and intact. The information in this Security...