clearcase2.txt

Date: Tue, 9 Feb 1999 17:57:27 +0100 From: Oezguer Kesim To: [email protected] Subject: Re: L0pht Advisory - Rational Software ClearCase root exploitable race conditions Holla, things are even worse! You may want to remove the setuid flag from /usr/atria/etc/dbloader, but this won't fix the...

autofs.linux.txt

Date: Fri, 19 Feb 1999 00:09:29 -0500 From: Brian Jones To: [email protected] Subject: Linux autofs overflow in 2.0.36+ -----BEGIN PGP SIGNED MESSAGE----- Overflow in Autofs - Feb 18 1999 Affected: Linux autofs kernel module in linux-2.0.36 to 2.2.1 Type of Problem: Buffer overflow in kernel...

[SECURITY] New versions of cfingerd fixes root exploit

We have received a report that the all versions of cfingerd prior to 1.4.0 and 1.3.2-18.1 are vulnerable to a root exploit - as posted on bugtraq. We recommend you upgrade your cfingerd package immediately or disable ALLOWEXECUTION. The latter is turned off in the default Debian configuration. wg...

[SECURITY] New versions of cfingerd fixes root exploit

We have received a report that the all versions of cfingerd prior to 1.4.0 and 1.3.2-18.1 are vulnerable to a root exploit - as posted on bugtraq. We recommend you upgrade your cfingerd package immediately or disable ALLOWEXECUTION. The latter is turned off in the default Debian configuration. wg...

Samba 2.0.5 - Local Overflow

Samba 2.0.5 - Local Overflow / source: https://www.securityfocus.com/bid/536/info There were a number of vulnerabilities in the Samba package pre-2.0.5. The first is a possible denial of service in nmbd the netbios name service daemon, which resulted in nmbd spinning until killed. The second...

Solaris 2.52.5.12.67.0 - sadmind Remote Buffer Overflow (2)

Solaris 2.52.5.12.67.0 - sadmind Remote Buffer Overflow 2 // source: https://www.securityfocus.com/bid/866/info Certain versions of Solaris ship with a version of sadmind which is vulnerable to a remotely exploitable buffer overflow attack. sadmind is the daemon used by Solstice AdminSuite...

Solaris 2.5.1 - 'kcms' Local Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/452/info There is an unchecked sprintf call in the versions of /usr/openwin/bin/kcmsconfigure shipped with solaris 2.5, 2.5.1 and 2.6. Unfortunately, kcmsconfigure is installed setuid root, making it possible for an attacker to overflow the buffer and...

[SECURITY] Seyon is vulnerable to a root exploit

Description We have received a report from SGI that a vulnerability has been discovered in the seyon program. This can lead to a root compromise. Any user who can execute the seyon program can exploit this vulnerability. Since SGI does not provide exploit information, we are unable to fix the...

Exim Buffer 1.6.2/1.6.51 - Local Overflow

/ source: https://www.securityfocus.com/bid/1859/info A potential local root yielding buffer overflow vulnerability exists in Exim mail client version 1.62. A buffer used in processing filenames of message attachments can be overflowed by a maliciously-formed filename. As a result, the excessive...

Solaris 5.5.1 X11R6.3 xterm (-xrm) Local Root Exploit

Exploit for solaris platform in category local exploits ===================================================== Solaris 5.5.1 X11R6.3 xterm -xrm Local Root Exploit ===================================================== / X11R6.3 xterm exploit for solaris 5.5.1 by DCRH 28/5/97 / include include inclu...

IRIX 5.3 /usr/sbin/iwsh Local Root Buffer Overflow

Exploit for irix platform in category local exploits ================================================== IRIX 5.3 /usr/sbin/iwsh Local Root Buffer Overflow ================================================== / /usr/sbin/iwsh.c exploit by DCRH 27/5/97 Tested on: R3000 Indigo Irix 5.3 R4400 Indy Irix...

BSD and Linux lpr Command Local Root Exploit

Exploit for linux platform in category local exploits ============================================ BSD and Linux lpr Command Local Root Exploit ============================================ -------------------------------------- linuxlprexploit.c ---------- include include include define...