1684 matches found
Sun VirtualBox VBoxNetAdpCtl配置工具本地特权提升漏洞
Bugraq ID: 36604 Sun VirtualBox是一款功能强大的x86虚拟机软件。 Sun VirtualBox VBoxNetAdpCtl配置工具存在未明错误，本地攻击者可以利用漏洞以root特权执行任意命令。 Sun VirtualBox 3.0.6 Sun VirtualBox 3.0.4 Sun VirtualBox 3.0.2 Sun VirtualBox 3.0 用户可参考如下安全公告获得补丁信息： http://sunsolve.sun.com/search/document.do?assetkey=1-66-268188-1...
Sun Solaris Cluster本地特权提升漏洞
Bugraq ID: 36486 Sun Solaris是一款商业性质的操作系统。 Solaris Cluster 3.2配置工具clsetup存在一个未明错误，本地攻击者可以利用漏洞以root特权执行任意命令。 目前没有详细漏洞细节提供。 Sun Cluster 3.2 Sun Solaris 用户可参考如下安全公告获得补丁信息： http://sunsolve.sun.com/search/document.do?assetkey=1-66-267148-1...
FreeBSD 'kqueue'存在一个未明NULL指针引用漏洞
Bugraq ID: 36375 FreeBSD是一款开放源代码的操作系统。 FreeBSD包含的kqueue存在一个未明NULL指针引用漏洞，本地攻击者可以利用漏洞获得root特权，目前没有详细漏洞细节提供。 FreeBSD FreeBSD 6.0 .x FreeBSD FreeBSD 6.0 -STABLE FreeBSD FreeBSD 6.0 -RELEASE FreeBSD FreeBSD 6.4-RELEASE-p5 FreeBSD FreeBSD 6.4-RELEASE-p4 FreeBSD FreeBSD 6.4-RELEASE-p2 FreeBSD FreeBSD 6....
Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : shadow vulnerability (USN-695-1)
Paul Szabo discovered a race condition in login. While setting up tty permissions, login did not correctly handle symlinks. If a local attacker were able to gain control of the system utmp file, they could cause login to change the ownership and permissions on arbitrary files, leading to a root...
Debian: Security Advisory (DSA-1709-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DSA-1709-1 shadow - privilege escalation
Bulletin has no description...
Linux/x86 - setuid(0) + Break chroot (../ 10x Loop) Shellcode (34 bytes)
Linux/x86 - setuid0 + Break chroot ../ 10x Loop Shellcode 34 bytes. Shellcode exploit for Linuxx86 platform / The setuid0+chroot shellcode. It is the one of the smallest shellcodes in the !!world!! it will put '../' 10 times Size 34 bytes OS Linux /rootteam/dev0id rootteam.void.ru...
FreeBSD -- netgraph / bluetooth privilege escalation
Problem Description: Some function pointers for netgraph and bluetooth sockets are not properly initialized. Impact: A local user can cause the FreeBSD kernel to execute arbitrary code. This could be used by an attacker directly; or it could be used to gain root privilege or to escape from a jail...
CUPS < 1.3.8-4 - Local Privilege Escalation
/ cve-2008-5377.c CUPS http://jon.oberheide.org Usage: $ gcc cve-2008-5377.c -o cve-2008-5377.c $ ./cve-2008-5377 $ id uid=0root gid=1000vm ... Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-5377 pstopdf in CUPS 1.3.8 allows local users to overwrite arbitrary files via a...
USN-695-1: shadow vulnerability
Paul Szabo discovered a race condition in login. While setting up tty permissions, login did not correctly handle symlinks. If a local attacker were able to gain control of the system utmp file, they could cause login to change the ownership and permissions on arbitrary files, leading to a root...
Disable Firewall
Added: 11/25/2008 Background This tool attempts to disable the firewall on the target. Limitations A connection to the target is required to run this tool. The connection requires root privileges on Unix and Linux targets. Platforms Windows / Linux / Unix...
smcFanControl 2.1.2 Multiple Buffer Overflow Vulnerabilities PoC (OSX)
No description provided by source. vnsecurity.net ADVISORY 2008-11 =============================== :Title: Buffer overflows in smcFanControl 2.1.2 for OSX :Severity: Critical :Reporter: KaiJern, Lau kjlau at vnsecurity.net :Products: smcFanControl 2.1.2 :OS: OSX :Fixed in: to be release...
smcFanControl 2.1.2 Multiple Buffer Overflow Vulnerabilities PoC (OSX)
Exploit for macOS platform in category dos / poc ====================================================================== smcFanControl 2.1.2 Multiple Buffer Overflow Vulnerabilities PoC OSX ====================================================================== vnsecurity.net ADVISORY 2008-11...
GLSA-200804-30 : KDE start_kdeinit: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200804-30 KDE startkdeinit: Multiple vulnerabilities Vulnerabilities have been reported in the processing of user-controlled data by startkdeinit, which is setuid root by default. Impact : A local attacker could possibly execute...
horde316-inclusion.txt
Horde 3.1.6 arbitrary file inclusion vulnerability, proof of concept & patch. A severe security vulnerability affects any unix distribution running version 3.1.6 of the Horde webmail client included in most popular webhosting control panels. All previous versions are also affected and it is...
CVE-2008-0928
Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges to access arbitrary memory and escape the virtual machine...
iDefense Security Advisory 02.07.08: IBM DB2 Universal Database db2pd Arbitrary Library Loading Vulnerability
iDefense Security Advisory 02.07.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 07, 2008 I. BACKGROUND IBM Corp.'s DB2 Universal Database product is a large database server product commonly used for high end databases. For more information, visit the following URL...
Debian Security Advisory DSA 092-1 (wmtv)
The remote host is missing an update to wmtv announced via advisory DSA 092-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 087-1 (wu-ftpd)
The remote host is missing an update to wu-ftpd announced via advisory DSA 087-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
