122 matches found
Sendmail <= 8.12.8 prescan() BSD Remote Root Exploit
Exploit for linux platform in category remote exploits ==================================================== Sendmail include include include include include include include include int maxarch=1; struct arch char os; // The OS int pos; // The position of ebp in the stack, with the last byte being...
linux kmod/ptrace bug - details
Hello There are many discussions on slashdot for example on the recent linux ptrace & kmod bug. I'll try to clarify what is this all about. It's a local root vulnerability. It's exploitable only if: 1. the kernel is built with modules and kernel module loader enabled and 2...
Mandrake 9.0 local root exploit
------------------------------------------------------------------------------------------------------------------ Priv8 Security - www.priv8security.com priv8mdk90.tar.gz - Mandrake 9.0 local root exploit Based on Idefense adv. http://www.idefense.com/advisory/01.21.03.txt Greets to : coideloko,...
Remote root vuln in HSphere WebShell
Hi all, Below is an advisory on a remote and local root vulnerability in the HSphere product by Positive Software which is used by many web-hosting providers. The vulnerability is in the WebShell component installed by default. Proof of concept exploits are provided and links to patched versions ...
CVE-2002-1010
Lotus Domino R4 allows remote attackers to bypass access restrictions for files in the web root via an HTTP request appended with a "?" character, which is treated as a wildcard character and bypasses the web handlers...
Potential remote root in CodeBlue log scanner
TITLE: Potential remote root in CodeBlue log scanner NAME: DEMI SEX GOD FROM HELL ADV 00001 DATE: YES, PLEASE MAIL ME IF YOU ARE FEMALE send pictures CRAZY TRACKING NUMBER THAT MAKES IT LOOK LIKE I HAVE SOME MASSIVE DATABASE OF JUAREZ: 7363A64B02 Props to dme@! Information ----------- About:...
codeblue.txt
TITLE: Pontential remote root in CodeBlue log scanner NAME: DEMI SEX GOD FROM HELL ADV 00001 DATE: YES, PLEASE MAIL ME IF YOU ARE FEMALE send pictures CRAZY TRACKING NUMBER THAT MAKES IT LOOK LIKE I HAVE SOME MASSIVE DATABASE OF JUAREZ: 7363A64B02 Props to dme@! Information ----------- you may...
xwall.s
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 GOBBLES SECURITY ADVISORY 32 ALERT! REMOTE ROOT HOLE IN DEFAULT INSTALL OF POPULAR OPERATING SYSTEM! ALERT! Forward: so was fydor trying to make his code unreadable when he write nmap? or was that just the fallout of poor planning? this is awful if...
New Kismet Packages available - SayText() and suid kismet_server issues
I have discovered 2 potentially exploitable holes in the wireless sniffer package Kismet. Both issues have been addressed by the author. I am in the process of determining if the local command line overflow is exploitable or not. The other issue may be dependant on if your OS will allow you to...
CVE-2002-0196
GetRelativePath in ACD Incorporated CwpAPI 1.1 only verifies if the server root is somewhere within the path, which could allow remote attackers to read or write files outside of the web root, in other directories whose path includes the web root...
OpenSSH 2.2.0 - 3.1.0 server contains a locally exploitable buffer overflow
effect: local root vulnerable services: -pass Kerberos IV TGT -pass AFS Token bug details: radix.c GETSTRING macro in radixtocreds function may cause buffer overflow. affected buffers: creds-service creds-instance creds-realm creds-pinst exploit code here: mantra.freeweb.hu...
CVE-1999-1205
CVE-1999-1205 affects nettune on HP-UX 10.01 and 10.00 where nettune is installed with setuid root, enabling a local attacker to modify critical networking configuration and cause a denial of service. The underlying cause is the risky setuid configuration of nettune, leading to elevated privilege...
Another local root vulnerability during installation of Tarantella Enterprise 3.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Larry W. Cashdollar Vapid Labs 2/18/2002 Another local root vulnerability during installation of Tarantella Enterprise 3. During installation a "twirling / | - " text graphic is displayed you remember them from the shareware games in DOS days.. they...
[SECURITY] [DSA-095-1] gpm (gpm-root) format string vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-095-1 [email protected] http://www.debian.org/security/ Robert van der Meulen December 27, 2001 - ------------------------------------------------------------------------ Package : gpm Problem...
Remote Root Hole in FreeBSD Ports
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++GOBBLES+SECURITY+RESEARCH+TEAM+INCORPORATED+++++++++++++++++ ALERT! ALERT! MULTIPLATFORM REMOTE ROOT! ALERT! ALERT! ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ include...
CVE-2001-0893
Acme minihttpd before 1.16 allows remote attackers to view sensitive files under the document root such as .htpasswd via a GET request with a trailing /...
FreeBSD-SA-01:58.lpd
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:58 Security Advisory FreeBSD, Inc. Topic: lpd contains remote root vulnerability Category: core Module: lpd Announced: 2001-08-30 Credits: ISS X-Force Affects: All...
Xvt 2.1 vulnerability
Package: xvt Version: 2.1 Problem type: Local root vulnerability Linux distribution: only tested on Debian ---- Introduction xvt is an X terminal-emulator that is designed to be more or less compatible with xterm while using much less swap space. It is mainly intended for use at sites which use...
OpenBSD 2.9,2.8 local root compromise
Return-Path: pent.sci-nnov.ru!securityfocus.com!bugtraq-return-420-vlad=sandy.ru Received: from adm.sci-nnov.ru adm.sci-nnov.ru 193.125.71.2 by pent.sci-nnov.ru 8.11.3/Dmiter-4.1-AGK-1.1 with ESMTP id f5EFXH490671 for [email protected]; Thu, 14 Jun 2001 19:33:17 +0400 MSD Received: from...
Fatal flaw in BestCrypt <= v0.7 (Linux)
Hello fellow Bugtraq'ers. As you can see in the message below I have discovered a flaw in the SUID-root "bctool" program that comes with BestCrypt from Jetico. A session transcript where the flaw is exploited is also included and so is a patch for the problem. For those of you that did not know,...