Possible local root vulnerability in Roxio Toast on Mac OS X

Possible local root vulnerability in Roxio Toast on Mac OS X By fintler [email protected] Summary: There is a format string bug in the binary /Library/Application Support/Roxio/TDIXSupport. It is installed suid root by default and may be exploited by finding the offset and overwriting the stack...

Debian DSA-095-1 : gpm - local root vulnerability

The package 'gpm' contains the gpm-root program, which can be used to create mouse-activated menus on the console. Among other problems, the gpm-root program contains a format string vulnerability, which allows an attacker to gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security,...

GLSA-200409-18 : cdrtools: Local root vulnerability in cdrecord if set SUID root

The remote host is affected by the vulnerability described in GLSA-200409-18 cdrtools: Local root vulnerability in cdrecord if set SUID root Max Vozeler discovered that the cdrecord utility, when set to SUID root, fails to drop root privileges before executing a user-supplied RSH program. By...

SUS: Local root vulnerability

Background SUS is a utility that allows regular users to be able to execute certain commands as root. Description Leon Juranic found a bug in the logging functionality of SUS that can lead to local privilege escalation. A format string vulnerability exists in the log function due to an incorrect...

cdrdao.sh

!/bin/sh DIR=pwd echo "" echo "cdrdao local root exploit - gr doesn't protect you this time" echo "Karol Wiêsek " echo "" sleep 2 umask 000 echo -n " Checking if /etc/ld.so.preload doesn't exist ... " if -f /etc/ld.so.preload ; then echo "WRONG" echo "/etc/ld.so.preload exists, write another...

[Full-Disclosure] [ GLSA 200409-11 ] star: Suid root vulnerability

Gentoo Linux Security Advisory GLSA 200409-11 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-200409-11 : star: Suid root vulnerability

The remote host is affected by the vulnerability described in GLSA-200409-11 star: Suid root vulnerability A suid root vulnerability exists in versions of star that are configured to use ssh for remote tape access. Impact : Attackers with local user level access could potentially gain root level...

star: Suid root vulnerability

Background star is an enhanced tape archiver, much like tar, that is recognized for it's speed as well as it's enhanced mt/rmt support. Description A suid root vulnerability exists in versions of star that are configured to use ssh for remote tape access. Impact Attackers with local user level...

Apple Mac OS X <= 10.3.3 AppleFileServer Remote Root Overflow

Exploit for macOS platform in category remote exploits ============================================================= Apple Mac OS X = 10.3.3 AppleFileServer Remote Root Overflow ============================================================= !/usr/bin/perl Priv8security com remote root exploit for...

[Full-Disclosure] IFH-ADV-31339 Exploitable Buffer Overflow in gv

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Exploitable Buffer Overflow in gv Infohacking Security Advisory 08.04.04 www.infohacking.com Aug 04, 2004 I. BACKGROUND Infohacking team me and myself discovered a new and unreported local root vulnerability in gv. II. DESCRIPTION The gv program that ...

Mandrake Linux Security Advisory : apcupsd (MDKSA-2003:018)

A remote root vulnerability in slave setups and some buffer overflows in the network information server code were discovered by the apcupsd developers. They have been fixed in the latest unstable version, 3.10.5 which contains additional enhancements like USB support, and the latest stable versio...

[Full-Disclosure] OSX Panther Internet Connect Vulnerability.

Apple OSX Panther Internet Connect - Local root Vulnerability. ============================================================== Date: 25.07.2004 Author: B-r00t. 2004. Email: B-r00t [email protected] Vendor: Apple Operating System: OSX Panther Possibly Previous Versions. Application: Internet...

applePanther.txt

Apple OSX Panther Internet Connect - Local root Vulnerability. ============================================================== Date: 25.07.2004 Author: B-r00t. 2004. Email: B-r00t Vendor: Apple Operating System: OSX Panther Possibly Previous Versions. Application: Internet Connect.app Tested:...

[Full-Disclosure] MDKSA-2004:016 - Updated mtools packages fix local root vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: mtools Advisory ID: MDKSA-2004:016 Date: February 25th, 2004 Affected versions: 9.2 Problem Description: Sebastian Krahmer found that the mformat program, when installed suid root, can create any...

kpopup.txt

A local root vuln exists in Kpopup version 0.9.1latest and proberly all other versions. It is avaliable from http://www.henschelsoft.de/kpopupen.html main site http://www.freebsd.org/ports/net.html and many other places if you search kpopup on google. I. BACKGROUND Kpopup is a KDE program for...

Local root vuln in kpopup

A local root vuln exists in Kpopup version 0.9.1latest and proberly all other versions. It is avaliable from http://www.henschelsoft.de/kpopupen.html main site http://www.freebsd.org/ports/net.html and many other places if you search kpopup on google. I. BACKGROUND Kpopup is a KDE program for...

ProFTPD 1.2.7 - 1.2.9rc2 Remote Root &amp; brute-force Exploit

No description provided by source. / ProFTPd 1.2.7 - 1.2.9rc2 remote r00t exploit -------------------------------------------- By Haggis This exploit builds on the work of bkbll to create a working, brute-force remote exploit for the \n procesing bug in ProFTPd. Tested on SuSE 8.0, 8.1 and RedHat...

[SECURITY] [DSA 274-1] New node packages fix remote root vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 274-1 [email protected] http://www.debian.org/security/ Martin Schulze August 29th, 2003 http://www.debian.org/security/faq -...

[Full-Disclosure] [SECURITY] [DSA 274-1] New node packages fix remote root vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 274-1 [email protected] http://www.debian.org/security/ Martin Schulze August 29th, 2003 http://www.debian.org/security/faq -...

BAZARR FAREWELL

/ traceroute local root advisory / / by: bazarr / / [email protected] / / bazarr episode / ------------------ PREFACE its me bazarr. i dont use ziplip anymore. resend any emails sent to bazarr@ziplip to [email protected] if i dident respond to them. this is a local root vulnerability in the...