Linux Kernel 2.6.x ptrace_attach Local Privilege Escalation Exploit

No description provided by source. / ptraceattach privilege escalation exploit by s0m3b0dy tested on Gentoo 2.6.29rc1 grataz: Tazo, rassta, nukedclx, maciek, D0hannuk, mivus, wacky, nejmo, filo... email: s0m3b0dy1 at gmail.com / include grp.h include stdio.h include fcntl.h include errno.h includ...

Linux Kernel 2.6.29 - exit_notify() Local Privilege Escalation

Linux Kernel 2.6.29 - exitnotify Local Privilege Escalation !/bin/sh gw-notexit.sh: Linux kernel 2.6.29 exitnotify local root exploit by Milen Rangelov gat3way-at-gat3way-dot-eu Based on 'exitnotify' CAPKILL verification bug found by Oleg Nestorov. Basically it allows us to send arbitrary signals...

Linux Kernel < 2.6.29 exit_notify() Local Privilege Escalation Exploit

Exploit for linux platform in category local exploits ====================================================================== Linux Kernel 2.6.29 exitnotify Local Privilege Escalation Exploit ====================================================================== !/bin/sh gw-notexit.sh: Linux kerne...

Linux Kernel < 2.6.29 - 'exit_notify()' Local Privilege Escalation

!/bin/sh gw-notexit.sh: Linux kernel /tmp/.m.c...

RedHat Update for kernel RHSA-2007:1049-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2007:1049-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

CentOS Update for kernel CESA-2007:1049 centos3 i386

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2007:1049 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

CentOS Update for kernel CESA-2007:1049 centos3 x86_64

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2007:1049 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Linux/x86 - fork() + setreuid(0, 0) + execve(cp /bin/sh /tmp/sh; chmod 4755 /tmp/sh) Shellcode (126 bytes)

Linux/x86 - fork + setreuid0, 0 + execvecp /bin/sh /tmp/sh; chmod 4755 /tmp/sh Shellcode 126 bytes. Shellcode exploit for Linuxx86 platform / linux/x86 shamelessly ripped from one of my unpublished exploits / / fork's, does setreuid0, 0; then execve's: /bin/sh -c "cp /bin/sh /tmp/sh; chmod 4755...

kernel security and bug fix update

2.4.21-58.0.0.0.1.EL - add directio support for qla drivers herb ora 6346849 - support PT Quad card ora 5751043 - io to nfs partition hangs ora 5088963 - add entropy for bnx2 nic ora 5931647 - avoid large allocation-fragmentation in MTU zab - fix clear highpage wli 2.4.21-58.EL - copyuser doesn't...

smcFanControl smc -k选项本地溢出漏洞

BUGTRAQ ID: 32252 smcFanControl是在苹果机器上所使用的用于控制风扇转速的免费软件。 在/Applications/smcFanControl.app/Contents/Resources/smc文件中，smc -k输入选项无法处理超大的缓冲区，这可能导致缓冲区溢出。以下是smc.c中的有漏洞代码段： -- snip snip -- int mainint argc, char argv int c; extern char optarg; extern int optind, optopt, opterr; kernreturnt result; int o...

kernel security and bug fix update

2.6.18-92.1.17.0.1.el5 - MM shrink zone patch John Sobecki,Chris Mason orabug 6086839 - NFS nfs attribute timeout fix Trond Myklebust orabug 7156607 RHBZ 446083 - NET Add entropy support to e1000 and bnx2 John Sobecki orabug 6045759 - NET fix netpoll race Tina Yang orabugz 5791 2.6.18-92.1.17.el5...

Gentoo Linux Portage privilege escalation

Relative shared library search path in suid application...

Gentoo Security Advisory GLSA 200502-13 (Perl)

The remote host is missing updates announced in advisory GLSA 200502-13. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200408-16 (glibc)

The remote host is missing updates announced in advisory GLSA 200408-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200409-11 (star)

The remote host is missing updates announced in advisory GLSA 200409-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200409-11 (star)

The remote host is missing updates announced in advisory GLSA 200409-11. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200409-18 (cdrtools)

The remote host is missing updates announced in advisory GLSA 200409-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

[SECURITY] Fedora 9 Update: ssmtp-2.61-11.6.fc9.1

A secure, effective and simple way of getting mail off a system to your mail hub. It contains no suid-binaries or other dangerous things - no mail spool to poke around in, and no daemons running in the background. Mail is simply forwarded to the configured mailhost. Extremely easy configuration...

Corel Linux 1.0 xconf工具存在多个安全漏洞

Corel Linux中的xconf工具中缺乏对用户输入的有效检查，并且没有正确放弃特权。因此本 地用户可以利用这些漏洞获得root权限，或者导致拒绝服务攻击。 1 将XF86Config的一些数据添加到系统中的任意文件中去。 /sbin/buildxconf没有检查用户输入的数据，并且被设置了setuid root位。当用"-f" 参数执行它时，用户可以将输出存储到一个指定文件，比如/etc/shadow 2 用一些垃圾数据替换掉任何存在文件的第一行 当用"-x"参数执行buildxconf程序时，它将用X server的路径/文件名替代掉指定文件的第...

SuSe mount/umount溢出漏洞

由于mount/umount命令没有对用户的输入进行正确的边界检查，如果攻击者以超长的相对路径名为参数运行mount/umount程序，将会覆盖为realpath函数动态分配的内存空间的内容。攻击者通过修改堆heap数据有可能会获得root特权。 SuSe Linux 所有版本 Package: util 2.10f 升级util软件包，或去掉mount/umount的suid位。 ftp://ftp.suse.com/pub/suse/axp/update/6.1/a1/util-2.10f-4.alpha.rpm...