[SECURITY] [DSA 401-1] New hylafax packages fix remote root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 401-1 [email protected] http://www.debian.org/security/ Martin Schulze November 17th, 2003 http://www.debian.org/security/faq -...

TerminatorX 3.8 - Multiple Command-Line and Environment Buffer Overrun Vulnerabilities (3)

// source: https://www.securityfocus.com/bid/8993/info It has been reported that TerminatorX may be prone to multiple vulnerabilities when handling command-line and environment variable data. As a result, an attacker may be capable of exploiting the application in a variety of ways to execute...

TerminatorX 3.8 - Multiple Command-Line and Environment Buffer Overrun Vulnerabilities (2)

TerminatorX 3.8 - Multiple Command-Line and Environment Buffer Overrun Vulnerabilities 2 // source: https://www.securityfocus.com/bid/8993/info It has been reported that TerminatorX may be prone to multiple vulnerabilities when handling command-line and environment variable data. As a result, an...

kpopup 0.9.x - Privileged Command Execution

kpopup 0.9.x - Privileged Command Execution // source: https://www.securityfocus.com/bid/8915/info It has been alleged that it is possible for local attackers to gain root privileges through kpopup, which is is installed setuid root by default. According to the report, kpopup uses the system3...

kpopup -- local root exploit and local denial of service

Mitre CVE reports: Format string vulnerability in main.cpp in kpopup 0.9.1-0.9.5pre2 allows local users to cause a denial of service segmentation fault and possibly execute arbitrary code via format string specifiers in command line arguments. misc.cpp in KPopup 0.9.1 trusts the PATH variable whe...

Musicqueue 0.91.01.1 - Multiple Buffer Overrun Vulnerabilities

Musicqueue 0.91.01.1 - Multiple Buffer Overrun Vulnerabilities // source: https://www.securityfocus.com/bid/8903/info Multiple buffer overrun vulnerabilities have been discovered in Musicqueue. Both issues stem from the lack of bounds checking when passing user-supplied input to the sprintf libc...

Musicqueue 0.9/1.0/1.1 - Multiple Buffer Overrun Vulnerabilities

// source: https://www.securityfocus.com/bid/8903/info Multiple buffer overrun vulnerabilities have been discovered in Musicqueue. Both issues stem from the lack of bounds checking when passing user-supplied input to the sprintf libc function. As a result, it may be possible for an attacker to...

ProFTPd 1.2.9 rc2 - '.ASCII' File Remote Code Execution (2)

ProFTPd remote root exploit solareclipse at phreedom dot org GPG key ID: E36B11B7 https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/3021.tar.gz 12262006-proftpd-not-pro-enough.tar.gz milw0rm.com 2003-10-15...

Local root exploit in SuSE Linux 7.3Pro

Affected: SuSE Linux 7.3Pro Not affected: SuSE Linux 8.2Pro, non-SuSE distributions Possibly affected: other SuSE distributions Vulnerable package: javarunt Impact: Local user can gain root privileges Exploit type: Symlink attack Release...

Local root exploit in SuSE Linux 8.2Pro

Affected: SuSE Linux 8.2Pro Not affected: SuSE Linux 7.3Pro, non-SuSE distributions Possibly affected: other SuSE distributions Vulnerable package: susewm Impact: Local user can gain root privileges Exploit type: Symlink attack Release...

Knox Arkeia Pro v5.1.12 remote root exploit

Exploit attached for Knox Arkeia Pro v5.1.12 backup software from http://www.arkeia.com. / Knox Arkiea arkiead local/remote root exploit. Portbind 5074 shellcode Tested on Redhat 8.0, Redhat 7.2, but all versions are presumed vulnerable. NULLs out least significant byte of EBP to pull EIP out of...

hztty 2.0 Local root exploit (Tested on Red Hat 9.0)

Exploit for linux platform in category local exploits ==================================================== hztty 2.0 Local root exploit Tested on Red Hat 9.0 ==================================================== / 0x333hztty = hztty 2.0 local root exploit more info : Debian Security Advisory DSA...

hztty 2.0 (RedHat 9.0) - Local Privilege Escalation

hztty 2.0 RedHat 9.0 - Local Privilege Escalation / 0x333hztty = hztty 2.0 local root exploit more info : Debian Security Advisory DSA 385-1 note I adjusted some part of hztty's code since there were some errors. hope this will not influence exploitation : tested against Red Hat 9.0 : c0wboy@0x33...

Knox Arkeia Pro 5.1.12 Backup Remote Root Exploit

Exploit for linux platform in category remote exploits ================================================= Knox Arkeia Pro 5.1.12 Backup Remote Root Exploit ================================================= / Knox Arkiea arkiead local/remote root exploit. Portbind 5074 shellcode Tested on Redhat 8....

Real Server 7/8/9 Remote Root Exploit (Windows & Linux)

No description provided by source. / / THCREALbad 0.4 - Wind0wZ & Linux remote root exploit / Exploit by: Johnny Cyberpunk thehackerschoice / THC PUBLIC SOURCE MATERIALS / / http://www.service.real.com/help/faq/security/rootexploit082203.html / / After successful exploitation of a Linux box just...

SRT2003-08-01-0126 - cdrtools local root exploit

Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...

wu-ftpd 2.6.2 off-by-one Remote Root Exploit

No description provided by source. / wu-ftpd v2.6.2 off-by-one remote 0day exploit. exploit by "you dong-hun"Xpl017Elz Brute-Force function added. / define VERSION "v0.0.3" include stdio.h include unistd.h include stdlib.h include netdb.h include netinet/in.h include sys/socket.h define DEBUGNG...

[SECURITY] [DSA-357-1] New wu-ftpd packages fix buffer overflow

Package : wu-ftpd Vulnerability : buffer overflow Problem type : remote root exploit Debian-specific: no CVE Ids : CAN-2003-0466 iSEC Security Research reports that wu-ftpd contains an off-by-one bug in the fbrealpath function which could be exploited by a logged-in user local or anonymous to gai...

GNU GNATS 3.113 - Environment Variable Buffer Overflow

// source: https://www.securityfocus.com/bid/8005/info It has been reported that GNATS is prone to a buffer overflow condition when parsing certain environment variables. An attacker can exploit this vulnerability by setting an overly long environment variable and invoking one of several GNATS...

SDFingerD 1.1 - Failure To Drop Privileges Privilege Escalation

SDFingerD 1.1 - Failure To Drop Privileges Privilege Escalation source: https://www.securityfocus.com/bid/7977/info sdfingerd has been reported prone to a local privilege escalation vulnerability. The issue presents itself because the sdfingerd daemon fails to sufficiently drop group privileges...