Nomachine NX Server privilege escalation

shell code execution via environment variables manipulation for suid application...

GNU C dynamic linker privilege escalation

Invalid $ORIGIN processing allows to load user library into suid application...

Gentoo Linux Portage privilege escalation

Relative shared library search path in suid application...

Mac OS X writeconfig privilege escalation

launchctl utility is executed by relative path from suid application...

Multiple Mac OS X security privilege escalation

Few suid application binaries are user-writable...

Kerio Webstar privilege escalation

Suid application loads library from current directory...

Rocks Clusters privilege escalation

"mount-loop" and "umount-loop" suid application privilege escalation...

Qpopper poppassd shared library privilege escalation

User can specify shared library path for suid application...

GLSA-200509-08 : Python: Heap overflow in the included PCRE library

The remote host is affected by the vulnerability described in GLSA-200509-08 Python: Heap overflow in the included PCRE library The 're' Python module makes use of a private copy of libpcre which is subject to an integer overflow leading to a heap overflow see GLSA 200508-17. Impact : An attacker...

perl PERLIO_DEBUG privilege escalation

By using PERLIODEBUG variable it's possible to redirect debug output of suid application to any file. Oversized PERLIODEBUG causes buffer overflow...

kstars -- exploitable set-user-ID application fliccd

A KDE Security Advisory explains: Overview KStars includes support for the Instrument Neutral Distributed Interface INDI. The build system of this extra 3rd party software contained an installation hook to install fliccd part of INDI as SUID root application. Erik Sjölund discovered that the code...

Isoqlog buffer overflow (fake)

Local buffer overflow during configuration parsing in non-suid application. Not exploitable...

[UNIX] Suid Application Execution May Give Local Root

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...

Переполнение буфера в mtr (buffer overflow)

Переполнение буфера в suid-приложении дает возможность использования RAW-сокета...

Переполнение буфера в hanterm (buffer overflow)

Переполнение буфера в suid-приложении...

Повышение привелегий через scoadminreg.cgi в Unixware (privelege escalation)

Суид-приложение scoadminreg.cgi может быть запущено локально...

Проблемы ptrace() в OpenBSD/NetBSD (privelege escalation)

С помощью ptrace можно изменить последовательность выполнения suid-приложения...

Переполнение буфера в pileup (buffer overflow)

Переполнение буфера в suid приложении...

Проблемы с обработчиками сигналов в FreeBSD (signal handlers)

При выполнении exec не все обработчики сигналов очищаются, что позволяет встроить свой код в suid-приложение...