Trend Micro OfficeScan - Buffer Overflow (Denial of Service) (PoC)

Trend Micro OfficeScan - Buffer Overflow Denial of Service PoC source: https://www.securityfocus.com/bid/28020/info Trend Micro OfficeScan Corporate Edition is prone to a buffer-overflow vulnerability and a denial-of-service vulnerability because the application fails to properly bounds-check...

Microsoft Windows Vista application spoofing through links

It's possible to bypass privileged application execution by spoofing start menu shortcuts...

Debian DSA-946-2 : sudo - missing input sanitising

The former correction to vulnerabilities in the sudo package worked fine but were too strict for some environments. Therefore we have reviewed the changes again and allowed some environment variables to go back into the privileged execution environment. Hence, this update. The configuration optio...

AIX 4.3/5.1 - diagrpt Arbitrary Privileged Program Execution

source: https://www.securityfocus.com/bid/2916/info AIX ships with a diagnostic reporting utility called 'diagrpt'. This utility is installed setuid root by default. When 'diagrpt' executes, it relies on an environment variable to locate another utility which it executes. This utility is executed...

[SECURITY] New version of mailx released

Package : mailx Problem type : local exploit Debian-specific: no mailx is a often used by other programs to send email. Unfortunately mailx as distributed in Debian GNU/Linux 2.1 has some features that made it possible to execute system commands if a user can trick a privileged program to send...