CVE-2002-2039

In QNX RTOS versions 4.25 and 6.1.0, /bin/su allows local users to read sensitive information from core dump files by sending SIGSERV (invalid memory reference); impact is partial confidentiality. The description notes the local privilege/impact but does not provide exploitable details, affected ...

Mac OS X <= 10.3.8 (CF_CHARSET_PATH) Local Root Buffer Overflow

Exploit for macOS platform in category local exploits =============================================================== Mac OS X include include include static char exec= / b-r00t's setuid0+exec/bin/sh. / "\x7c\x63\x1a\x79\x40\x82\xff\xfd\x7d\x68\x02\xa6\x3b\xeb"...

Apple Mac OSX 10.3.8 - 'CF_CHARSET_PATH' Local Buffer Overflow / Local Privilege Escalation

/ MacOS XCFCHARSETPATH: local root exploit. by: [email protected] fakehalo/realhalo found by: iDefense anon finder saw the advisory on bugtraq and figured i'd slap this together, so simple i had to. exploits via the /usr/bin/su binary. you must press ENTER at the "Password: " prompt. / include inclu...

SUS &#40;extended su&#41; format string bug

Format string bug on syslog call...

vBulletin HTML Injection Vuln

Advisory Name : vBulletin HTML Injection Vulnerability Release Date : June 24,2004 Application : vBulletin Test On : 3.0.1 or others? Vendor : Jelsofthttp://www.vbulletin.com/ Discover : Cheng Peng Suapplesoupatmsn.com Intro: From vendor's website ,it says that ,vBulletin is a powerful, scalable...

YaBBXSS.txt

Advisory Name : YaBB/YaBBse Cross Site Scripting Vulnerability Release Date : Mar 14,2004 Application : YaBB/YaBBse Test On : YaBB 1 GoldSP1.3 YaBB SE 1.5.1 Final Vendor URL : http://www.yabbforum.com/ http://www.yabbse.org/ Discover : Cheng Peng Suapplesoupatmsn.com Proof of conecpt: The problem...

ezBoard Cross Site Scripting Vulnerability

Advisory Name:ezBoard Cross Site Scripting Vulnerability Release Date: Feb 24,2004 Application: ezBoard Version Affected: 7.3u or lower? Vendor URL: http://www.ezboard.com/ Discover: Cheng Peng Suapplesoupatmsn.com Proof of Concept: This vuln is from font,ezBoard doesn't filter illegal characters...

CVE-2002-0816

CVE-2002-0816 affects Hewlett-Packard Tru64 UNIX 5.x where the local privileged program "+su" is vulnerable to a buffer overflow triggered by a long username/argument. This allows local users to gain root privileges or cause instability, as described in CERT/HP documentation and CVE records. Expl...

CVE-2002-0755

The CVE concerns Kerberos 5 su (k5su) in FreeBSD 4.5 and earlier, where the process does not verify wheel-group membership before granting superuser privileges. This could allow an unauthorized user to execute commands as root. Affected component is the k5su integration in FreeBSD’s Kerberos setu...

CVE-2002-0754

Affected software : Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier. Vulnerability : k5su relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges after it has dropped them. Impact : potential privilege e...

QNX RTOS 4.25/6.1 - su Password Hash Disclosure

source: https://www.securityfocus.com/bid/4914/info It has been reported that the 'su' utility for QNX RTOS accepts the SIGSEGV signal and dumps a world readable core file. An attacker is able to analyze the core file and obtain very sensitive information. It is very probable that this is a...

CVE-1999-1142

SunOS 4.1.2 and earlier allows local users to gain privileges via LD_* environment variables affecting dynamically linked setuid/setgid programs (e.g., login, su, sendmail) by causing real and effective UIDs to the same user. This yields a local escalation with complete confidentiality and integr...

CVE-1999-1318

CVE-1999-1318 affects SunOS 4.1.3 and earlier. The vulnerable component is /usr/5bin/su , which uses a search path that includes the current working directory (.). This allows local users to gain privileges via Trojan horse programs. The description clearly states a local privilege escalation and...

CVE-2001-0762

Buffer overflow in su-wrapper 1.1.1 allows local users to execute arbitrary code via a long first argument...

CVE-2001-0762

Buffer overflow in su-wrapper 1.1.1 allows local users to execute arbitrary code via a long first argument...

CVE-2001-0762

CVE-2001-0762 describes a buffer overflow in su-wrapper 1.1.1 that allows local users to execute arbitrary code by providing a long first argument. The vulnerability is consistent with a local-exploit scenario and a potential impact on confidentiality, integrity, and availability as per the CVSS ...

Caldera OpenUnix8 Overflows &#40;reject, lpsystem, su&#41;

I contacted Caldera SCO about some local overflows in a few binaries that came default with my install of OpenUnix8... Here is a snippet of the email dialog between us. Due to the lack of access to the machine and lack of a good debugger on the system, I have not had time to put any further...

Переполнение буфера в su-wrapper &#40;buffer overflow&#41;

Переполнение буфера в агрументе командной строки...

su-wrapper 1.1.1 Local root exploit.

/ - su-wrapper.c - / // / /usr/sbin/su-wrappersu-wrapper 1.1.1 local root exploit. / / / / Package Description: / / su-wrapper is an little util which lets special users execute / / processes under another uid/gid. / / / / Vulnerability Description: / / If a long line on the first argument is...

CVE-2000-0996

Format string vulnerability in OpenBSD su program and possibly other BSD-based operating systems allows local attackers to gain root privileges via a malformed shell...