Vulnerability in HP Photosmart/Deskjet Drivers for Mac OS X (root compromise)

Hello everyone, after some frustration with the HP Photosmart printer driver not being as smart as the name suggests and HP support not as suppor- tive as I would wish about the issues raised below, I've decided to bring the following multiple security vulnerabilities of the HP Photosmart/Deskjet...

Etnus TotalView 5.

Program: Etnus TotalView Version: 5.0.0-4 DESCRIPTION ----------- TotalView is a multiprocess source-level debugger for programs written in the C, C++, and Fortran programming languages. TotalView is part of a suite of programming tools from Etnus, LLC. PROBLEM ------- Failed to install the files...

Ecartis/Listar multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Name: Ecartis / Listar Version: read the details Vendor: The Ecartis Project. http://www.ecartis.org/ Author: Janusz Niewiadomski [email protected], Wojciech Purczynski [email protected] Date: March 10, 2002 Issue: ====== Multiple buffer overflow...

[NGSEC-2002-1] Ettercap, remote root compromise

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Next Generation Security Technologies http://www.ngsec.com Security Advisory Title: Ettercap, remote root compromise ID: NGSEC-2002-1 Application: ettercap 0.6.3.1 and older http://ettercap.sourceforge.net Date: 05/02/2002 Status: Vendor Contacted, ne...

Hanterm 3.3 - Local Buffer Overflow (1)

Hanterm 3.3 - Local Buffer Overflow 1 // source: https://www.securityfocus.com/bid/4050/info Hanterm is a replacement for xterm which includes Hangul support, used for Korean language systems. A buffer overflow error exists in hanterm. If it is called locally with a maliciously constructed...

Hanterm 3.3 - Local Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/4050/info Hanterm is a replacement for xterm which includes Hangul support, used for Korean language systems. A buffer overflow error exists in hanterm. If it is called locally with a maliciously constructed parameter, it is possible to overflow a...

FreeBSD-SA-02:08.exec

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:08 Security Advisory FreeBSD, Inc. Topic: race condition during exec may allow local root compromise Category: core Module: kernel Announced: 2002-01-24 Credits: Logan...

FreeBSD-SA-01:64.wu-ftpd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:64 Security Advisory FreeBSD, Inc. Topic: wu-ftpd port contains remote root compromise Category: ports Module: wu-ftpd Announced: 2001-12-04 Credits: CORE Security...

Advisory CA-2001-33 Multiple Vulnerabilities in WU-FTPD

CERT Advisory CA-2001-33 Multiple Vulnerabilities in WU-FTPD Original release date: November 29, 2001 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Systems running WU-FTPD and its derivatives Overview WU-FTPD is a widely deploy...

UNICOS LOCAL HOLE ALL VERSIONS

CRAY UNICOS NQSD FORMAT BUG LOCAL ROOT COMPROMISE ALL VERSIONS MICKEY MOUSE HACKING SQUADRON ADVISORY : 1 DISCLAIMER ---------- We are a collective group of security professionals who want to remain nameless due to the various legal and corporate red tape which now surrounds the issue of disclosu...

Advisory: Berkeley pmake

Problem description ---------------------- There is a format string bug in the Berkeley's pmake 2.1.33 and below parallel make package as well as a buffer overflow problem. Pmake is suid root on various Linux distributions and uses root privileges for binding to low TCP ports. The ordinary...

CVE-1999-1039

Vulnerability in 1 diskalign and 2 diskperf in IRIX 6.4 patches 2291 and 2848 allow a local user to create root-owned files leading to a root compromise...

CVE-1999-1039

CVE-1999-1039 affects IRIX 6.4, specifically the diskalign and diskperf code paths patched by IRIX 6.4 patches 2291 and 2848. A local user could create root-owned files, leading to a root compromise. The connected records confirm affected components and root-privelege impact; no exploit details a...

Multiple vendor 'Taylor UUCP' problems.

Brief description Due to incorrect argument handling in a component of the Taylor UUCP package, it is possible for local users to gain uid/gid uucp. This may allow further elevation, depending on the system, up to and including root access. On OpenBSD 2.8 and probably others it allows root...

SuSE Security Announcement: screen (SuSE-SA:2001:030)

-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: screen Announcement-ID: SuSE-SA:2001:030 Date: Wednesday, September 5 2001 18:00 MEST Affected SuSE versions: 6.0, 6.1, 6.2 6.3, 6.4, 7.0, 7.1, 7.2 Vulnerability Type: local root compromise Severity 1-10: 5 SuSE default packag...

Red Hat linux restore uses insecure environment variables allowing root compromise

Overview Some implementations of the Linux restoration utility, restore, call external programs on remote machines via the RSH environment variable. This may permit an attacker to compromise root if restore is setuid root. Description Some implementations of the Linux restoration utility, restore...

Linux dump uses environment variables insecurely, allowing for root compromise

Overview Some implementations of the Linux backup utility, dump, call external programs on remote machines via the RSH environment variable. This may permit an attacker to compromise root if dump is setuid root. Description Some implementations of the Linux backup utility, dump, permit use of...

Arkeia Possible remote root & information leakage

Arkeia 4.2 - other versions not tested Possible remote root & information leakage Sumary Arkeia www.arkeia.com is from their webpage: "Arkeia simplifies data protection by providing automated backup and recovery.The system supports a wide variety of computers, operating systems and storage device...

mf.txt

Potential Root Compromise in MicroFocus Cobol Summary ------- If the AppTrack feature is enabled, the default install of MicroFocus Cobol 4.1 Merant's commercial suite of cobol utilities contains a security hole which can lead to root compromise. Specifics --------- In the default install,...

openbsdrace.txt

[email protected] Georgi Guninski security advisory 47, 2001 OpenBSD 2.9,2.8 local root compromise Systems affected: OpenBSD 2.9,2.8 Have not tested on other OSes but they may be vulnerable Risk: High Date: 14 June 2001 Legal Notice: This Advisory is Copyright c 2001 Georgi Guninski. You may...