624 matches found
CVE-2007-0823: Undefined Security Weakness
xterm on Slackware Linux 10.2 stores information that had been displayed for a different user account using the same xterm process, which might allow local users to bypass file permissions and read other users' files, or obtain other sensitive information, by reading the xterm process memory. NOT...
FreePBX Shell命令执行漏洞
FreePBX是一款开放源代码的VOIP应用服务程序。 FreePBX不正确处理SHELL元字符，远程攻击者可以利用漏洞以进程权限执行任意命令。 由于对CALLERIDname或者number中的SHELL元字符缺少处理，可导致提交恶意字符串，以WEB权限执行。 OSSP Sheila 1.1.5 + Debian Linux 3.0 + HP Secure OS software for Linux 1.0 + MandrakeSoft Corporate Server 1.0.1 + MandrakeSoft Linux Mandrake 8.2 + MandrakeSoft Lin...
PHP 3.0.16/4.0.2 Remote Format Overflow Exploit
No description provided by source. / PHP 3.0.16/4.0.2 remote format overflow exploit. Copyright c 2000 Field Marshal Count August Anton Wilhelm Neithardt von Gneisenau [email protected] my regards to sheib and darkx All rights reserved Pascal Boucheraine's paper was enlightening THERE IS NO...
Apple QuickTime Plug-In Arbitrary Script Execution Weakness
Description Apple QuickTime plug-in is prone to an arbitrary-script-execution weakness when executing QuickTime Media Link files .qtl. An attacker can exploit this issue to execute arbitrary script code in the context of the affected application and load local content in a user's browser. Althoug...
Slackware 10.0 / 10.1 / 10.2 / 8.1 / 9.0 / 9.1 / current : mutt (SSA:2006-207-01)
New mutt packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix a possible security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2006-207-01. Th...
Slackware 10.2 / current : firefox/thunderbird/seamonkey (SSA:2006-155-02)
New Firefox and Thunderbird packages are available for Slackware 10.2 and -current to fix security issues. In addition, a new SeaMonkey package is available for Slackware -current to fix similar issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...
nbSMTP <= 0.99 (util.c) Client-Side Command Execution Exploit
No description provided by source. / nbSMTPfsexp.c nbSMTP v0.99 remote format string exploit by CoKi [email protected] root@nosystem:/home/coki/audi ./nbSMTPfsexp nbSMTP v0.99 remote format string exploit by CoKi [email protected] Use: ./nbSMTPfsexp options options: -t arg type of target...
nbSMTP 0.99 - util.c Client-Side Command Execution
nbSMTP 0.99 - util.c Client-Side Command Execution / nbSMTPfsexp.c nbSMTP v0.99 remote format string exploit by CoKi root@nosystem:/home/coki/audi ./nbSMTPfsexp nbSMTP v0.99 remote format string exploit by CoKi Use: ./nbSMTPfsexp options options: -t type of target system -r return address -s...
Slackware 9.1 / current : xine security update (SSA:2004-111-01)
New xine packages are available for Slackware 9.1 and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2004-111-01. The text itself is copyright C Slackware...
ngIRCd 0.8.2 - Remote Format String
ngIRCd 0.8.2 - Remote Format String / ngircdfsexp.c ngIRCd Use: ./ngircdfsexp -h options options: -h host or IP -p ircd port by default 6667 -t type of target system -g syslog GOT address -o offset RET addr by default 0x0806b000 -b brutefoce the RET address from 0x0806b000 + offset -l targets lis...
ngIRCd <= 0.8.2 Remote Format String Exploit
Exploit for linux platform in category remote exploits ============================================ ngIRCd Use: ./ngircdfsexp -h options options: -h host or IP -p ircd port by default 6667 -t type of target system -g syslog GOT address -o offset RET addr by default 0x0806b000 -b brutefoce the RET...
ngIRCd <= 0.8.2 Remote Format String Exploit
No description provided by source. / ngircdfsexp.c ngIRCd = 0.8.2 remote format string exploit Note: To obtain a successful exploitation, we need that ngIRCd has been compiled with IDENT, logging to SYSLOG and DEBUG enabled. Original Reference: http://www.nosystem.com.ar/advisories/advisory-11.tx...
ngIRCd 0.8.2 - Remote Format String
/ ngircdfsexp.c ngIRCd Use: ./ngircdfsexp -h options options: -h host or IP -p ircd port by default 6667 -t type of target system -g syslog GOT address -o offset RET addr by default 0x0806b000 -b brutefoce the RET address from 0x0806b000 + offset -l targets list root@servidor:/home/coki/audit...
/usr/bin/trn Local Exploit (not suid)
Exploit for linux platform in category local exploits ===================================== /usr/bin/trn Local Exploit not suid ===================================== / /usr/bin/trn local root exploit By ZzagorR - http://www.rootbinbash.com / / sh-2.05b$ ./trn usage : ./trn ret buf example : ./trn...
Citadel/UX <= 6.27 Remote Root Format String Exploit
Exploit for linux platform in category remote exploits ==================================================== Citadel/UX options options: -h host or IP -t type of target system -l targets list -g syslog GOT address -r RET address email protected:/audit$ ./citadelfsexp -h localhost -t0 Citadel/UX...
CitadelUX 6.27 - Format String
CitadelUX 6.27 - Format String / citadelfsexp.c Citadel/UX v6.27 remote format string exploit Use: ./citadelfsexp -h options options: -h host or IP -t type of target system -l targets list -g syslog GOT address -r RET address coki@nosystem:/audit$ ./citadelfsexp -h localhost -t0 Citadel/UX v6.27...
Citadel/UX 6.27 - Format String
/ citadelfsexp.c Citadel/UX v6.27 remote format string exploit Use: ./citadelfsexp -h options options: -h host or IP -t type of target system -l targets list -g syslog GOT address -r RET address coki@nosystem:/audit$ ./citadelfsexp -h localhost -t0 Citadel/UX v6.27 remote format string exploit by...
CDRTools CDRecord 2.0 (Mandrake Slackware) - Local Privilege Escalation
CDRTools CDRecord 2.0 Mandrake Slackware - Local Privilege Escalation !/usr/bin/perl Cdrecord version 2.0 and local root exploit. wsxz@localhost buffer$ perl priv8cdr.pl 4 Using target number 4 Using Mr .dtors 0x808c82c Cdrecord 2.0 i586-mandrake-linux-gnu scsibus: -1 target: -1 lun: -1 Warning:...
efstool.txt
§+++++++++++++++++++++++++++++++++++++++++++++++§ | -=- SOLDIERX.COM Presents -=- | +++++++++++++++§++++++§+++++++++++++++ \//////////////// EFSTOOL LOCAL ROOT EXPLOIT \\\\\\\\// \\\\\\\\\SLACKWARELINUX///////////////// \:::::::::::::::::::::::::::::::: by...
