SCO Unixware 7.1.3 - 'ptrace' Local Privilege Escalation

/ SCO Unixware 7.1.3 ptrace local root exploit ============================================ SCO Unixware 7.1.3 kernel allows unprivledged users to debug binaries. The condition can be exploited by an attacker when he has execute permissions to a file which has the suid bit set. Example. $ uname -...

[Full-Disclosure] MDKSA-2004:016 - Updated mtools packages fix local root vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: mtools Advisory ID: MDKSA-2004:016 Date: February 25th, 2004 Affected versions: 9.2 Problem Description: Sebastian Krahmer found that the mformat program, when installed suid root, can create any...

Tolis Group BRU 17.0 - Local Privilege Escalation (2)

// source: https://www.securityfocus.com/bid/8215/info It has been reported that BRU may not properly parse commandline arguments, potentially leading to at least two vectors of exploitation. It may be possible for local attackers to conduct format string-based attacks as well as buffer...

New advisory + exploit from LByte

+- Limpid Byte Advisory 003---------------------------------+ | | | Program: 2fax | | Version: all =2.02 | | OS: Linux/Windows | | Bug: Buffer Overflow in -bpcx option | | Homepage: http://www.atbas.org | | | | Discovered by Crazy Einstein [email protected] | | |...

linux-dump.txt

Hackerslab bugpaper Linux dump buffer overflow File : /sbin/dump SYSTEM : Linux INFO : The problem occurs when it gets the argument. It accepts the argument without checking out its length, and this causes = the problem. It seems that this vulnerability also applies to RedHat Linux 6.2beta, the...

oracle_intelligent_agent.txt

START OF BUGTRAQ POST Oracle installations with the 'Oracle Intelligent Agent' installed have a path related vulnerability. The problem lies in the dbsnmp program located in $ORACLEHOME/bin . This setuid root program calls a tcl script nmiconf.tcl located by default in...

cvnmount.exploit

Covin Security Releases: mount bufferoverflow exploit v1.0 Tested operated systems: All current distributions of Linux Affect: Local users on systems affected can gain overflow mounts syntax buffer and execute a shell by overwriting the stack. Affected binaries: /bin/mount and /bin/umount...

oracle.8.0.5.intelligent.agent.txt

Date: Fri, 30 Apr 1999 14:11:39 +0100 From: Anthony Clarke To: [email protected] Subject: Huge security hole in Oracle 8.0.5 with Intellegent agent installed oracle-digested ------------- Begin Forwarded Message ------------- Subject: Huge security hole in Oracle 8.0.5 with Intellegent agent...