Дырки в утилитах из RedHat

Дырки в утилитах gkermit egid==uucp; slocate gid slocate, slrn, C-Kermit gid=uucp, diskcheck и Mgetty-sendfaxперезапись любого файла, ksu sgid root, eSound, IMAP4rev1 v12.264 DoS,...

WU-FTPD SITE EXEC/INDEX Format String Vulnerability

This module exploits a format string vulnerability in versions of the Washington University FTP server older than 2.6.1. By executing specially crafted SITE EXEC or SITE INDEX commands containing format specifiers, an attacker can corrupt memory and execute arbitrary code. Module Options msf use...

Stanley T. Shebs Xconq 7.2.2 - xconq Buffer Overflow

/ source: https://www.securityfocus.com/bid/1495/info Xconq is a multiple player strategy game available for many unix platforms. It contains a number of buffer overflow vulnerabilities including the ability to overflow stack buffers with either the DISPLAY or the USER environment variables. The...

Linux news 21.06.00

Ядро 2.4.0test1-ac22 Работа вошла в привычный режим... Alan выпускает патчи, мы их тестируем. http://www.kernel.org Обновления для 2.2.16 от RedHat После не так давно обнаруженных ошибок в ядре 2.2.16, RedHat выложило подправленную версию ядра. Подробнее:...

Splitvt exploit

Problem ======= Splitvt 1.6.3 contains a buffer overflow, if you have installed splitvt suid root like Debian/Redhat/etc, btw not slackware you should upgrade to 1.6.4. Solution ======= Debian users: see http://www.debian.org/security/2000/20000605a Redhat: Redhat did respond with a "that package...

Remote DOS in linux rpc.lockd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, all... Found what appears to be a remote DOS in the linux kernel code for NFS lockd. Only requires a restart of the service, but the port stays bound in a iclosewait state for what appears to be an indefinite time. I have only tested this in...

Stelian Pop dump 0.4 - restore Buffer Overflow

Stelian Pop dump 0.4 - restore Buffer Overflow // source: https://www.securityfocus.com/bid/1330/info A buffer overflow exists in the 'restore' program, part of the dump 0.4b15-1 package, distributed with RedHat Linux 6.2. By supplying a long string containing machine executable code at the promp...

Atrus Trivalie Productions Simple Network Time Sync 1.0 - daemon Buffer Overflow

source: https://www.securityfocus.com/bid/1289/info A scanf overflow has been discovered in the Simple Network Time Sync daemon and client version 1.0. Currently the buffer overflow has been tested on RedHat 6.1. It may be possible to obtain root, although it appears one only has 50 characters to...

Atrus Trivalie Productions Simple Network Time Sync 1.0 - daemon Buffer Overflow

Atrus Trivalie Productions Simple Network Time Sync 1.0 - daemon Buffer Overflow source: https://www.securityfocus.com/bid/1289/info A scanf overflow has been discovered in the Simple Network Time Sync daemon and client version 1.0. Currently the buffer overflow has been tested on RedHat 6.1. It...

Vulnerability in SNTS

I noticed an uncommon scanf overflow in the Simple Network Time Sync daemon and client version 1.0, tested on Redhat 6.1. I haven't looked into this fully yet, but it looks as tho it could be root comprimising as it sits on a priveledged udp port and seems to coredump, but looks like it only give...

Cygnus Network Security 4.0/KerbNet 5.0 / MIT Kerberos 4/5 / RedHat 6.2 - Compatibility 'krb_rd_req()' Local Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/1220/info Several buffer overflow vulnerabilities exist in Kerberos 5 implmenetations due to buffer overflows in the Kerberos 4 compatability code. These include MIT Kerberos 5 releases 1.0.x, 1.1 and 1.1.1, MIT Kerberos 4 patch level 10 and, most...

Cygnus Network Security 4.0KerbNet 5.0 MIT Kerberos 45 RedHat 6.2 - Compatibility krb_rd_req() Local Buffer Overflow (2)

Cygnus Network Security 4.0KerbNet 5.0 MIT Kerberos 45 RedHat 6.2 - Compatibility krbrdreq Local Buffer Overflow 2 // source: https://www.securityfocus.com/bid/1220/info Several buffer overflow vulnerabilities exist in Kerberos 5 implmenetations due to buffer overflows in the Kerberos 4...

Local DoS : RedHat 6.0

Hello, I'm not sure if this problem has ever been addressed or not, but considering that I just spent a day recovering from a corrupted root partition and this can be done by any user with window manager access, I thought this might be worth mentioning anyway. While killing yet another zombie...

"gdm" remote hole

Hi, Note that I was going to wait for an official fixed release of gdm, but RedHat have released an errata update to the public, so no point hanging around SUMMARY ======= "gdm" is a replacement for "xdm", the X display manager. gdm is a part of the GNOME desktop. A buffer overflow exists in the...

Linux news 21.05.00

64 x 64 Компания Silicon Graphics планирует разработать дополнение к Linux, которое позволит существенно увеличить масштабируемость этой операционной системы и позволит устанавливать ее даже на 64-процессорные серверы с процессорами архитектуры IA-64 Подробнее:...

Various Lame Stuff

Hi all, Just a summary of some vulnerabilities that have been covered in the Forbidden Knowledge e-zine lately, which some people on the list may need to know... Covered in Issue Eight --- Proxy Plus www.proxyplus.cz has various insecure default settings. NiteServer FTPd is vulnerable to several...

sses-sshauth.txt

Sword & Shield Enterprise Security, Inc. - Security Advisory www.sses.net, Copyright c 2000 Advisory: Secure Shell Authentication Vulnerability Release Date: May 10, 2000 Application: sshd Severity: High - A user local or remote can log into any account with a valid login shell. Status: Affected...

Cygnus Network Security 4.0KerbNet 5.0 MIT Kerberos 45 RedHat 6.2 - Compatibility krb_rd_req() Remote Buffer Overflow (1)

Cygnus Network Security 4.0KerbNet 5.0 MIT Kerberos 45 RedHat 6.2 - Compatibility krbrdreq Remote Buffer Overflow 1 // source: https://www.securityfocus.com/bid/1220/info Several buffer overflow vulnerabilities exist in Kerberos 5 implmenetations due to buffer overflows in the Kerberos 4...

SuSE 6.3 Gnomelib buffer overflow

/ Gnomelib exploit by bladi & aLmUDeNa All gnome apps have an exploitable buffer overflow gnomelib when get DISPLAY environment variable. Affected: S.u.S.E Linux: 6.3 Not vulnerable: RedHat 6.x Linpus Linux release 6.3 Debian NoTe: don't forget to put 6M in /tmp ---------6M.c--------- void main...

Linux news 03.05.00

Linux 2.0.39pre4 Вышла новая pre-версия следующего ядра Linux из старой стабильной серии: Linux 2.0.39pre4. Список изменений состоит из исправлений различных ошибок предыдущей версии. Подробнее: http://linuxtoday.com/stories/21020.html Phrack 56 Read Online:...