911 matches found
Debian DSA-087-1 : wu-ftpd - remote root exploit
CORE ST reports that an exploit has been found for a bug in the wu-ftpd glob code this is the code that handles filename wildcard expansion. Any logged in user including anonymous FTP users can exploit the bug to gain root privileges on the server. %NASLMINLEVEL 70300 C Tenable Network Security,...
Debian DSA-089-2 : icecast-server - remote root exploit (and others)
The icecast-server a streaming music server package as distributed in Debian GNU/Linux 2.2 has several security problems : - if a client added a / after the filename of a file to be downloaded the server would crash - by escaping dots as %2E it was possible to circumvent security measures and...
Debian DSA-049-1 : cfingerd
Megyer Laszlo report on Bugtraq that the cfingerd daemon as distributed with Debian GNU/Linux 2.2 was not careful in its logging code. By combining this with an off-by-one error in the code that copied the username from an ident response cfingerd could be exploited by a remote user. Since cfinger...
Debian DSA-045-2 : ntpd - remote root exploit
Przemyslaw Frasunek reported that ntp daemons such as that released with Debian GNU/Linux are vulnerable to a buffer overflow that can lead to a remote root exploit. A previous advisory DSA-045-1 partially addressed this issue, but introduced a potential denial of service attack. This has been...
Debian DSA-122-1 : zlib - malloc error (double free)
The compression library zlib has a flaw in which it attempts to free memory more than once under certain conditions. This can possibly be exploited to run arbitrary code in a program that includes zlib. If a network application running as root is linked to zlib, this could potentially lead to a...
[Full-Disclosure] Debian netkit telnetd vulnerability
Exposure: Remote root compromise through buffer handling flaws Confirmed vulnerable: Up-to-date Debian 3.0 woody issue is Debian-specific Debian netkit-telnet-ssl-0.17.24+0.1 package Debian netkit-telnet-ssl-0.17.17+0.1 package Mitigating factors: Telnet service must be running and accessible to...
NetBSD Security Advisory 2004-009: ftpd root escalation
-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2004-009 ================================= Topic: ftpd root escalation Version: NetBSD-current: source prior to Aug 10, 2004 NetBSD 2.0 branch: source prior to Aug 15, 2004 NetBSD 1.6.2: affected NetBSD 1.6.1: affected NetBSD 1.6: affect...
OpenSSH < 3.2.1 AFS/Kerberos Ticket/Token Passing Overflow
Binary data 1989.prm...
Apple Mac OS X <= 10.3.3 AppleFileServer Remote Root Overflow
Exploit for macOS platform in category remote exploits ============================================================= Apple Mac OS X = 10.3.3 AppleFileServer Remote Root Overflow ============================================================= !/usr/bin/perl Priv8security com remote root exploit for...
Dropbear SSH <= 0.34 Remote Root Exploit
Exploit for linux platform in category remote exploits ======================================== Dropbear SSH quit Connection closed. % objdump -R /usr/local/sbin/dropbear| grep malloc 080673bc R386JUMPSLOT malloc % drop-root -v24 localhost ?.2022u%email protected's password: Connection closed by...
Mandrake Linux Security Advisory : apcupsd (MDKSA-2003:018)
A remote root vulnerability in slave setups and some buffer overflows in the network information server code were discovered by the apcupsd developers. They have been fixed in the latest unstable version, 3.10.5 which contains additional enhancements like USB support, and the latest stable versio...
Mandrake Linux Security Advisory : samba (MDKSA-2003:044)
An exploitable buffer overflow was discovered in the Samba server that can lead to an anonymous remote root compromise. The Samba Team also discovered some potential overflows during an internal code audit which was done in response to the previously noted buffer overflow problem. All versions of...
[security bulletin] SSRT4782 rev. 0 HP-UX CIFS Server potential remote root access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01062 REVISION: 0 SSRT4782 rev. 0 HP-UX CIFS Server potential remote root access ----------------------------------------------------------------- NOTICE: There are no restrictions for distribution of this Bulletin provided...
eSeSIX.txt
eSeSIX Thintune thin client multiple vulnerabilities IT-Consult, 2004-07-24 Background - -------- Thintune is a series of thin client appliances sold by eSeSIX GmbH, Germany. They offer ICA, RDP, X11 and SSH support based on a customized Linux platform. See http://www.thintune.com for details...
SUSE-SA:2002:040: lprng, html2ps
The remote host is missing the patch for the advisory SUSE-SA:2002:040 lprng, html2ps. The lprng package contains the 'runlpr' program which allows the lp user to execute the lpr program as root. Local attackers can pass certain commandline arguments to lpr running as root, fooling it to execute...
SUSE-SA:2003:032: wuftpd
The remote host is missing the patch for the advisory SUSE-SA:2003:032 wuftpd. Janusz Niewiadomski and Wojciech Purczynski of iSEC Security Research have found a single byte buffer overflow in the Washington University ftp daemon wuftpd, a widely used ftp server for Linux-like systems. It is yet...
@stake advisory: WebSTAR (5.3.2 and below) Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: WebSTAR 5.3.2 Multiple Vulnerabilities Release Date: 07/13/2004 Application: WebSTAR 5.3.2 and below Platform: MacOS X 10.3.3 and below Severity: A remote attacker can obtain root privilege...
RHEL 2.1 : mysql (RHSA-2003:094)
Updated packages are available that fix both a double-free security vulnerability and a remote root exploit security vulnerability found in the MySQL server. Updated 11 Aug 2003 Updated mysqlclient9 packages are now included. These were previously missing from this erratum. MySQL is a multi-user,...
FreeBSD : ProFTPD ASCII translation bug resulting in remote root compromise (156)
The following package needs to be updated: proftpd %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgcf0fb4263f9611d8b0960020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...
RHEL 2.1 : sendmail (RHSA-2003:074)
Updated Sendmail packages are available to fix a vulnerability that may allow remote attackers to gain root privileges by sending a carefully crafted message. Updated March 18 2003 Added packages for Red Hat Enterprise Linux ES and Red Hat Enterprise Linux WS. Sendmail is a widely used Mail...