Juergen Weigert screen 3.9 - User Supplied Format String

// source: https://www.securityfocus.com/bid/1641/info Various format string vulnerabilities exist in versions 3.9.5 and prior of 'screen' that may allow local users to elevate their privileges. If screen is setuid root, it is possible to alter the contents of the variable which stores the user i...

screen 3.9.5 root vulnerability

PROBLEM DESCRIPTION A vulnerability exists in the program "screen" version 3.9.5 and earlier. If screen is installed setuid root, a local user may gain root privilege. There are many systems where the program isn't setuid root by default, but on many systems afaik at least SuSE Linux, Red Hat 5.2...

[SECURITY] new version of screen released

Package: screen Vulnerability: local exploit Debian-specific: no A format string bug was recently discovered in screen which can be used to gain elevated privilages if screen is setuid. Debian 2.1 slink did ship screen setuid and the exploit can be used to gain root privilages. In Debian 2.2 pota...

[SECURITY] new version of screen released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Michael Stone September 2, 2000 - ------------------------------------------------------------------------ Package: screen Vulnerability: local...

anonymous SMBwriteX DoS

a new concept had to be invented for this one: "the BSOD". a problem that causes an nt5 server's screen to go black. here is a harmless SMB request, prepared earlier from a netmon capture: SMB C write & X, FID = 0x1801, Write 0x73 at 0x00000000 SMB: C write & X, FID = 0x1801, Write 0x73 at...

CVE-2000-0467

Buffer overflow in Linux splitvt 1.6.3 and earlier allows local users to gain root privileges via a long password in the screen locking function...

Aladdin Software Security SecretDisk console blocking failure

Good $daytime, SecretDisk, made by Aladdin Software Security R.D., http://www.aladdin.ru/ provides cryptographic file system for Win9x boxes. It supports usage of parallel port keys, smartcards, PCMCIA cards, or recently mentioned USB eTokens, in combination with password protection. Among others...

CVE-2000-0364

The CVE-2000-0364 entry concerns Red Hat Linux 6.0 where screen and rxvt fail to properly set tty device modes, enabling a local user to write to other virtual consoles. The vulnerability is localized (attack vector LOCAL) with low complexity and no authentication, and it can impact confidentiali...

Lockdown vulnerability - All versions

Release Date: May 4, 2000 Systems Affected: All machines running Lockdown Corporation's Lockdown AntiTrojan program ALL VERSIONS. Tested under Windows98. Results may vary under different operating systems, but all are vulnerable to the same problem. THE PROBLEM Lockdowns main display textbox can...

CVE-1999-0894

Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals...

CVE-1999-0894

Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals...

PT-2000-1029 · Red Hat · Red Hat

Name of the Vulnerable Software and Affected Versions: Red Hat Linux affected versions not specified Description: The issue is related to the screen program in Red Hat Linux, which does not utilize Unix98 ptys. This allows local users to write to other terminals. Recommendations: At the moment,...

Novell Client 3.03.0.1 - Denial of Service

Novell Client 3.03.0.1 - Denial of Service source: https://www.securityfocus.com/bid/700/info Novell client versions 3.0 and 3.01 for Windows platforms are vulnerable to a remotely exploitable vulnerability which could cause a denial of service. The client opens a listening tcp socket on port 427...

Novell Client 3.0/3.0.1 - Denial of Service

source: https://www.securityfocus.com/bid/700/info Novell client versions 3.0 and 3.01 for Windows platforms are vulnerable to a remotely exploitable vulnerability which could cause a denial of service. The client opens a listening tcp socket on port 427, to which if a SYN is sent, results in the...

CVE-1999-1454

Macromedia "The Matrix" screen saver on Windows 95 with the "Password protected" option enabled allows attackers with physical access to the machine to bypass the password prompt by pressing the ESC Escape key...

CVE-1999-0382

The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with elevated privileges...

CVE-1999-0382

The CVE-1999-0382 issue affects the Windows NT screen saver component, where the security context change is not properly verified. This allows attackers to run programs with elevated privileges, per the description in the NVD entry and corroborating Red Hat/CVE and CVE listings. The description d...

windows_kod.txt

Subject: ip stack bug in windows kod.ckiss of death To: [email protected] / ::: kod.c kiss of death version 1.2 ::: author kod.c bug found by klepto / [email protected] / rewritten by ignitor / ignitor@EFnet ::: stuph works on bsd/linux/nix ::: notes bluescreens windows users98/98se and kill...

nmrctoken.txt

Date: Fri, 2 Oct 1998 01:04:20 -0500 From: Simple Nomad Subject: NMRC Advisory - Lame NT Token Ring DoS Nomad Mobile Research Centre A D V I S O R Y www.nmrc.org Simple Nomad [email protected] 30Sep1998 Platform : Windows NT Application : TCP/IP Severity : Medium Synopsis -------- On Token Ring...

nt.screensaver.token.txt

Date: Tue, 9 Mar 1999 12:57:42 -0800 From: Aleph One To: [email protected] Subject: Windows NT Screen Saver Vulnerability Cybermedia Software has found the following vulnerability: Screen Saver vulnerability Description: The Screen Saver is started by Winlogon.Exe whenever the machine is idle...