Cygnus Network Security 4.0KerbNet 5.0 MIT Kerberos 45 RedHat 6.2 - Compatibility krb_rd_req() Remote Buffer Overflow (1)

Cygnus Network Security 4.0KerbNet 5.0 MIT Kerberos 45 RedHat 6.2 - Compatibility krbrdreq Remote Buffer Overflow 1 // source: https://www.securityfocus.com/bid/1220/info Several buffer overflow vulnerabilities exist in Kerberos 5 implmenetations due to buffer overflows in the Kerberos 4...

SuSE 6.3 Gnomelib buffer overflow

/ Gnomelib exploit by bladi & aLmUDeNa All gnome apps have an exploitable buffer overflow gnomelib when get DISPLAY environment variable. Affected: S.u.S.E Linux: 6.3 Not vulnerable: RedHat 6.x Linpus Linux release 6.3 Debian NoTe: don't forget to put 6M in /tmp ---------6M.c--------- void main...

Linux news 03.05.00

Linux 2.0.39pre4 Вышла новая pre-версия следующего ядра Linux из старой стабильной серии: Linux 2.0.39pre4. Список изменений состоит из исправлений различных ошибок предыдущей версии. Подробнее: http://linuxtoday.com/stories/21020.html Phrack 56 Read Online:...

Piranha's RH6.2 default password

The 'piranha' package is installed on the remote host. This package, as it is distributed with Linux RedHat 6.2, comes with the login/password combination 'piranha/q' or 'piranha'/'piranha'. An attacker may use it to reconfigure your Linux Virtual Servers LVS. %NASLMINLEVEL 70300 C Tenable Networ...

RedHat 6.2 Piranha Virtual Server Package - Default Account and Password

source: https://www.securityfocus.com/bid/1148/info A default username and password has been discovered in the Piranha virtual server and load balancing package from RedHat. Version 0.4.12 of the piranha-gui program contains a default account, piranha, with the password 'q' no quotes. Using this...

ircii_exploit.txt

The following exploits are for IrcII4.4. A dcc chat buffer overflow, one is for linux and the other one is for mirc. -- start irciisploit.txt -- / ircii-4.4 exploit by bladi & aLmUDeNa buffer overflow in ircii dcc chat's allow to excute arbitrary Affected: ircII-4.4 Patch: Upgrade to ircII-4.4M...

Qualcomm qpopper 2.53/3.0 / RedHat imap 4.5 -4 / UoW imap 4.5 popd - Lock File Denial of Service

source: https://www.securityfocus.com/bid/1132/info Vulnerabilities exist in a number of pop3 daemon implementations, having to do with their creation of lock files. Affected include Qualcomm's qpopper, and the popd included as part of the imap-4 rpm from RedHat. Lockfiles in both implementation...

Qualcomm qpopper 2.533.0 RedHat imap 4.5 -4 UoW imap 4.5 popd - Lock File Denial of Service

Qualcomm qpopper 2.533.0 RedHat imap 4.5 -4 UoW imap 4.5 popd - Lock File Denial of Service source: https://www.securityfocus.com/bid/1132/info Vulnerabilities exist in a number of pop3 daemon implementations, having to do with their creation of lock files. Affected include Qualcomm's qpopper, an...

xfs

Due to improper input validation NULL pointer occours on strcpy, any user may crash X fontserver under RedHat 6.x, causing effective DoS for whole X server : Michal Zalewski [email protected] tp.internet/security http://lcamtuf.na.export.pl =--= bash$ : :|:&;: =-----= God is real, unless declared...

RedHat Linux 6.x - X Font Server Buffer Overflow (Denial of Service)

RedHat Linux 6.x - X Font Server Buffer Overflow Denial of Service // source: https://www.securityfocus.com/bid/1111/info A denial of service exists in the X11 font server shipped with RedHat Linux 6.x. Due to improper input validation, it is possible for any user to crash the X fontserver. This...

University of Washington - imap LSUB Buffer Overflow (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'UoW IMAP...

RedHat Linux 6.x - X Font Server Buffer Overflow (Denial of Service)

// source: https://www.securityfocus.com/bid/1111/info A denial of service exists in the X11 font server shipped with RedHat Linux 6.x. Due to improper input validation, it is possible for any user to crash the X fontserver. This will prevent the X server from functioning properly. Additional,...

Cygnus Network Security 4.0/KerbNet 5.0 / MIT Kerberos 4/5 / RedHat 6.2 - Compatibility 'krb_rd_req()' Remote Buffer Overflow (3)

// source: https://www.securityfocus.com/bid/1220/info Several buffer overflow vulnerabilities exist in Kerberos 5 implmenetations due to buffer overflows in the Kerberos 4 compatability code. These include MIT Kerberos 5 releases 1.0.x, 1.1 and 1.1.1, MIT Kerberos 4 patch level 10 and, most...

Cygnus Network Security 4.0KerbNet 5.0 MIT Kerberos 45 RedHat 6.2 - Compatibility krb_rd_req() Remote Buffer Overflow (3)

Cygnus Network Security 4.0KerbNet 5.0 MIT Kerberos 45 RedHat 6.2 - Compatibility krbrdreq Remote Buffer Overflow 3 // source: https://www.securityfocus.com/bid/1220/info Several buffer overflow vulnerabilities exist in Kerberos 5 implmenetations due to buffer overflows in the Kerberos 4...

Standard Poors ComStock 4.2.4 - Command Execution

Standard Poors ComStock 4.2.4 - Command Execution source: https://www.securityfocus.com/bid/1080/info Numerous vulnerabilities exist in the ComStock product, as sold by Standard & Poor's. ComStock is based on the RedHat 5.1 distribution, and contains many of the vulnerabilities found in the 5.1...

Standard & Poors ComStock 4.2.4 - Command Execution

source: https://www.securityfocus.com/bid/1080/info Numerous vulnerabilities exist in the ComStock product, as sold by Standard & Poor's. ComStock is based on the RedHat 5.1 distribution, and contains many of the vulnerabilities found in the 5.1 distribution. In addition, it contains numerous...

Mandrake 6.x RedHat 6.x Turbolinux 3.5 b24.x6.0.2 userhelperPAM - Path (2)

Mandrake 6.x RedHat 6.x Turbolinux 3.5 b24.x6.0.2 userhelperPAM - Path 2 // source: https://www.securityfocus.com/bid/913/info Because of double path vulnerabilities in the binary userhelper and PAM, it is possible to get root locally on RedHat 6.0 and 6.1 systems. Both userhelper and PAM follow...

Mandrake 6.x / RedHat 6.x / Turbolinux 3.5 b2/4.x/6.0.2 userhelper/PAM - Path (2)

// source: https://www.securityfocus.com/bid/913/info Because of double path vulnerabilities in the binary userhelper and PAM, it is possible to get root locally on RedHat 6.0 and 6.1 systems. Both userhelper and PAM follow ".." paths and userhelper allows you to specifiy a program to execute as ...

Halloween Linux 4.0 RedHat Linux 6.16.2 - imwheel (1)

Halloween Linux 4.0 RedHat Linux 6.16.2 - imwheel 1 // source: https://www.securityfocus.com/bid/1060/info A vulnerability exists in the 'imwheel' package for Linux. This package is known to be vulnerable to a buffer overrun in its handling of the HOME environment variable. By supplying a...

Flying.txt

Vulnerability: Any user can read any file in the system. title=Flying rev. 6.20 author=Helmut Hoenig system=tested on Redhat 5.2, possibly others [email protected] Grampa Elite Overview: Flying is a X-Windows program I have found installed on Redhat 5.2 that is actually a gateway for...