110 matches found
Roxio Toast 7 privilege escalation
External applications are launched with relative path...
ROXIO_RACE_NETRAGARD-20060624.txt
Netragard, L.L.C Advisory 09/11/2006 Strategic Reconnaissance Team ------------------------------------------------ http://www.netragard.com -- "We make I.T. Safe." About Netragard ---------------------------------------------------------------------- Netragard is a unique I.T. Security company...
[Full-disclosure] [NETRAGARD-20060624 SECURITY ADVISORY] [ ROXIO TOAST 7 TITANIUM LOCAL ROOT COMPROMISE - DEJA VU RACE CONDITION]
Netragard, L.L.C Advisory 09/11/2006 Strategic Reconnaissance Team ------------------------------------------------ http://www.netragard.com -- "We make I.T. Safe." About Netragard ---------------------------------------------------------------------- Netragard is a unique I.T. Security company...
Netragard Security Advisory 2006-06-24
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Netragard, L.L.C. -- Vulnerability Research and Exploitation Team www.netragard.com Advisory Information - ---------------------------------------------------------------------- Contact: : Adriel T. Desautels Advisory ID : NETRAGARD-20060624 Product...
Roxio Toast 7 - DejaVu Component PATH Variable Privilege Escalation
Roxio Toast 7 - DejaVu Component PATH Variable Privilege Escalation source: https://www.securityfocus.com/bid/19596/info Roxio Toast is prone to a local privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. As a result, local users may set their own search...
[Full-disclosure] NETRAGARD-20060624 SECURITY ADVISORY] [ROXIO TOAST 7 TITANIUM - LOCAL ROOT COMPROMISE ]
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Netragard, L.L.C. -- Vulnerability Research and Exploitation Team www.netragard.com Advisory Information - ---------------------------------------------------------------------- Contact: : Adriel T. Desautels Advisory ID : NETRAGARD-20060624 Product...
Roxio Toast 7 - DejaVu Component PATH Variable Privilege Escalation
source: https://www.securityfocus.com/bid/19596/info Roxio Toast is prone to a local privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. As a result, local users may set their own search path for external applications that are called by setuid programs th...
CVE-2004-1398
CVE-2004-1398 describes a format string vulnerability in prelink.c within kextload on Apple OS X, used by TDIXSupport in Roxio Toast Titanium and possibly other products. The underlying issue arises from format string specifiers in the extension argument, enabling local users to execute arbitrary...
Possible local root vulnerability in Roxio Toast on Mac OS X
Possible local root vulnerability in Roxio Toast on Mac OS X By fintler [email protected] Summary: There is a format string bug in the binary /Library/Application Support/Roxio/TDIXSupport. It is installed suid root by default and may be exploited by finding the offset and overwriting the stack...