QNX Neutrino RTOS privilege escalation

It's possible to overwrite files via LDDEBUGOUTPUT for suid applications...

CVE-2011-0649

TIBCO CVE-2011-0649 affects Rendezvous and Enterprise Message Service components on Unix: Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), Rendezvous Secure Routing Daemon (rvsrd), and EMS Server (tibemsd) across Rendezvous 8.2.1–8.3.0, EMS 5.1.0–6.0.0, TRA 5.6.2–5.7.0, Silver B...

SuSE 11.1 Security Update : rpm (SAT Patch Number 3678)

This is a re-release of the previous rpm security update with corrected %version-%release information. This update fixes a security problem where RPM misses to clear the SUID/SGID bit of old files during package updates. CVE-2010-2059 Additionally, a bug verifying RSAv4 signatures which marked al...

Linux Kernel 2.6.32 (Ubuntu 10.04) - proc Handling SUID Privilege Escalation

Linux Kernel 2.6.32 Ubuntu 10.04 - proc Handling SUID Privilege Escalation Source: http://www.halfdog.net/Security/2011/SuidBinariesAndProcInterface/ proc Handling of Already Opened Files: Subvert The Stack Base Address Randomization With Suid-Binaries Problem description: Latest ubuntu lucid sto...

Linux Kernel 2.6.32 (Ubuntu 10.04) - '/proc' Handling SUID Privilege Escalation

Source: http://www.halfdog.net/Security/2011/SuidBinariesAndProcInterface/ proc Handling of Already Opened Files: Subvert The Stack Base Address Randomization With Suid-Binaries Problem description: Latest ubuntu lucid stock kernel 2.6.32-27-generic contains a bug that allows to keep attached to...

IBM Tivoli Storage Manager buffer overflow

Buffer overflow in suid root dsmtca backup client...

SuSE 11 / 11.1 Security Update : popt (SAT Patch Numbers 2647 / 2648)

This update fixes a security problem where RPM misses to clear the SUID/SGID bit of old files during package updates. CVE-2010-2059 Also the following bugs were fixed : - make 'rpmconfigcheck status' exit with 4 bnc592269 - do not use glibc for passwd/group lookups when --root is used bnc536256 -...

IBM OmniFind Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits =============================================== IBM OmniFind Privilege Escalation Vulnerability =============================================== Privilege escalation in two applications CVE-2010-3895 Root SUID bits are set for the application...

IBM OmniFind - Local Privilege Escalation

Privilege escalation in two applications CVE-2010-3895 Root SUID bits are set for the applications »esRunCommand« and »estaskwrapper«. ------------------------------------------------------------------------- -rwsr-xr-x 1 root users ... /opt/IBM/es/bin/esRunCommand -rwsr-xr-x 1 root users...

Cisco Unified Communications Manager shell characters vulnerability

Shell characters vulnerability in /usr/local/cm/bin/pktCapprotectData suid binary...

IBM OmniFind - Local Privilege Escalation

IBM OmniFind - Local Privilege Escalation Privilege escalation in two applications CVE-2010-3895 Root SUID bits are set for the applications »esRunCommand« and »estaskwrapper«. ------------------------------------------------------------------------- -rwsr-xr-x 1 root users...

Fedora 12 : glibc-2.11.2-3 (2010-16641)

Correct x86 CPU family and model check BZ11640, 596554 - Don't crash on unresolved weak symbol reference - sunrpc: Fix spurious fall-through - Never expand $ORIGIN in privileged programs 643306, CVE-2010-3847 - Require suid bit on audit objects in privileged programs CVE-2010-3856 Note that...

GNU C dynamic linker privilege escalation

Invalid $ORIGIN processing allows to load user library into suid application...

glibc security update

2.5-49.el55.7 - Require suid bit on audit objects in privileged programs 645677, CVE-2010-3856...

The GNU C library dynamic linker expands $ORIGIN in setuid library search path

The GNU C library dynamic linker expands $ORIGIN in setuid library search path ------------------------------------------------------------------------------ Gruezi, This is CVE-2010-3847. The dynamic linker or dynamic loader is responsible for the runtime linking of dynamically linked programs...

GNU C library dynamic linker - $ORIGIN Expansion

GNU C library dynamic linker - $ORIGIN Expansion from: http://marc.info/?l=full-disclosure&m=128739684614072&w=2 The GNU C library dynamic linker expands $ORIGIN in setuid library search path ------------------------------------------------------------------------------ Gruezi, This is...

openSUSE Security Update : popt (openSUSE-SU-2010:0629-1)

This update fixes the problem where RPM misses to clear the SUID/SGID bit of old files during package updates. CVE-2010-2059 Also following bugfixes were merged from SLE11 : - make 'rpmconfigcheck status' exit with 4 bnc592269 - do not use glibc for passwd/group lookups when --root is used...

rpm security update

4.3.3-33nonptl - fix CVE-2010-2059, fails to drop SUID/SGID bits on package upgrade 626709 - add dist tag...

Fedora Update for ssmtp FEDORA-2010-11811

Check for the Version of ssmtp OpenVAS Vulnerability Test Fedora Update for ssmtp FEDORA-2010-11811 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

[SECURITY] Fedora 12 Update: ssmtp-2.61-15.fc12

A secure, effective and simple way of getting mail off a system to your mail hub. It contains no suid-binaries or other dangerous things - no mail spool to poke around in, and no daemons running in the background. Mail is simply forwarded to the configured mailhost. Extremely easy configuration...