CVE-2004-0077

The domremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the domunmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different...

Important: Red Hat Security Advisory: : Updated XFree86 packages provide security and bug fixes

Updated XFree86 packages for Red Hat Linux 9 provide security fixes to font libraries and XDM. XFree86 is an implementation of the X Window System providing the core graphical user interface and video drivers in Red Hat Linux. XDM is the X display manager. Multiple integer overflows in the transf...

[SECURITY] [DSA-385-1] New hztty packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 385-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 18th, 2003 http://www.debian.org/security/faq -...

DSA-332 linux-kernel-2.4.17 - several vulnerabilities

Bulletin has no description...

Multiple Sun Database Functions Buffer Overflow Vulnerabilities

Description Sun dbmopen, ndbm, dbm and dbminit library functions have been reported prone to buffer overflow vulnerabilities. Each of these issues likely present themselves due to a lack of sufficient bounds checking performed when copying externally supplied data into an internal memory buffer...

Qpopper 4.0.x - 'poppassd' Privilege Escalation

/ Title: Qpopper v4.0.x poppassd local root exploit. Exploit code: 0x82-Local.Qp0ppa55d.c -- ./0x82-Local.Qp0ppa55d -u x82 -p mypasswd Qpopper v4.0.x poppassd local root exploit. by Xpl017Elz / include include include include define BUFSZ 0x82 define DPOPPASS "/usr/local/bin/poppassd" define DNAM...

CVE-2002-0754

Kerberos 5 su k5su in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges after it has dropped them...

CVE-2002-0442

The CVE-2002-0442 relates to a buffer overflow in the dlvr_audit component of Caldera OpenServer versions 5.0.5 and 5.0.6. Exploitation would allow local users to escalate privileges to root. The provided documents confirm the affected product, vulnerable function, and outcome (local privilege es...

NSFOCUS SA2003-02: Solaris lpq Stack Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NSFOCUS Security AdvisorySA2003-02 Topic: Solaris lpq Stack Buffer Overflow Vulnerability Release Date: 2003-3-31 CVE CAN ID: CAN-2003-0091 Affected system: =================== Sun Solaris 2.5.1 SPARC/x86 Sun Solaris 2.6 SPARC/x86 Sun Solaris 7...

Traceroute-nanog 6 - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/6166/info A vulnerability has been discovered in Traceroute-nanog. It has been reported that Traceroute-nanog contains a buffer overflow condition. The overflow occurs in the 'getorigin' function in the 'traceroute.c' file. Due to insufficient bounds...

IBM Informix SE 7.25 sqlexec - Local Buffer Overflow (2)

IBM Informix SE 7.25 sqlexec - Local Buffer Overflow 2 source: https://www.securityfocus.com/bid/4891/info Informix is an enterprise database distributed and maintained by IBM. A buffer overflow vulnerability has been reported for Informix-SE for Linux. The overflow is due to an unbounded string...

IBM Informix SE 7.25 sqlexec - Local Buffer Overflow (1)

IBM Informix SE 7.25 sqlexec - Local Buffer Overflow 1 // source: https://www.securityfocus.com/bid/4891/info Informix is an enterprise database distributed and maintained by IBM. A buffer overflow vulnerability has been reported for Informix-SE for Linux. The overflow is due to an unbounded stri...

CVE-2002-0356

Vulnerability in XFS filesystem reorganizer fsrxfs in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files...

CVE-2001-0533

The CVE-2001-0533 issue affects IBM AIX 4.3.x and 5.1 where the libi18n library is vulnerable to a buffer overflow triggered by a crafted LANG environment value. Local users could gain root privileges when running setuid programs (e.g., aixterm). IBM’s advisory describes temporary fixes (libi18n_...

Cobalt RaQ 2.03.04.0 XTR - MultiFileUpload.php Authentication Bypass (2)

Cobalt RaQ 2.03.04.0 XTR - MultiFileUpload.php Authentication Bypass 2 source: https://www.securityfocus.com/bid/4252/info Cobalt RaQ is a server appliance for Internet-based services. It is distributed and maintained by Sun Microsystems. The 'MultiFileUpload.php' script is not sufficiently...

CVE-2001-0671

Buffer overflows in 1 sendstatus, 2 killprint, and 3 chkfhost in lpd in AIX 4.3 and 5.1 allow remote attackers to gain root privileges...

Flaws in recent Linux kernels

Hello, There are two bugs present in Linux kernels 2.2.x, x=19 and 2.4.y, y=9. The first vulnerability results in local DoS. The second one, involving ptrace, can be used to gain root privileges locally in case of default install of most popular distributions. Linux 2.0.x is not vulnerable to the...

Ошибка форматной строки в ToolTalk rpc.ttdbserverd (format string)

Позволяет получить привилегии root...

CVE-1999-1247

CVE-1999-1247 affects HP DCE/9000 on HP-UX 9.x via a vulnerability in the HP Camera component, enabling a local attacker to obtain root privileges. The connected documents provide the vulnerability description and affected platform but do not specify the exact root cause, vulnerable versions beyo...

top format string bug exploit code (exploitable)

hi. It still seems to be affected under 3.5beta9 including this version someone said it's not the problem of exploitable vulnerability about 8 month ago , but it's possible to exploit though situation is difficult. following code and some procedure comments demonstrate it. possible to get kmem...