Rocks Clusters privilege escalation

"mount-loop" and "umount-loop" suid application privilege escalation...

Suid utilities (vixie-cron, shadow, ppp) user limits privilege escalation

setuid return code is not checked. It makes it possible to execute code with root privileges by exhausting user limits...

Hobbit monitor: Security issue with Hobbit 4.2-beta client

I was just notified by a Hobbit user that the current beta client has a security problem in the client "logfetch" utility, when installed as suid-root which is the default if "make install" is executed as root. Impact ------ The effect of this is that any user who is able to login and create file...

Hobbit client unauthorized files access

logfecth suid utiliy allows local files access...

KDE kdm symbolic links problem

Suid root application tries to read configuration from /.dmrc file without checking for symbolic links. It makes it possible to read few trings from any file with symbolic link...

CVE-2006-2183

CVE-2006-2183 affects TrueCrypt 4.1 on Linux when running as a set-user-ID root process. The vulnerability arises from an untrusted search path: a modified PATH environment variable referencing a malicious mount command could allow local users to execute arbitrary commands and gain privileges. Th...

NSFOCUS SA2006-02 : IBM AIX mklvcopy Local Privilege Escalation Vulnerability

NSFOCUS Security Advisory SA2006-02 IBM AIX mklvcopy Local Privilege Escalation Vulnerability Release Date: 2006-04-24 CVE ID: CVE-2006-1246 http://www.nsfocus.com/english/homepage/research/0602.htm Affected systems & software =================== IBM AIX 5.3 Unaffected systems & software...

Symantec Live Update for Macintosh privilege escalation

suid applications executes external application by relative path...

mysql -- database suid privilege escalation

Dmitri Lenev reports a privilege escalation in MySQL. MySQL evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote and local authenticated users to gain privileges through a routine that has been made available...

[Full-disclosure] Buffer Overflow and Installation Script Error in Firebird 1.5.3

--------------------------------------------------------------------------- Buffer Overflow and Installation Script Error in Firebird 1.5.3 --------------------------------------------------------------------------- Author: Jose Antonio Coret Joxean Koret Date: 2005-02-18 Location: Basque Country...

SCO Unixware 7.1.3 - ptrace Local Privilege Escalation

SCO Unixware 7.1.3 - ptrace Local Privilege Escalation / SCO Unixware 7.1.3 ptrace local root exploit ============================================ SCO Unixware 7.1.3 kernel allows unprivledged users to debug binaries. The condition can be exploited by an attacker when he has execute permissions t...

SCO Unixware 7.1.3 - 'ptrace' Local Privilege Escalation

/ SCO Unixware 7.1.3 ptrace local root exploit ============================================ SCO Unixware 7.1.3 kernel allows unprivledged users to debug binaries. The condition can be exploited by an attacker when he has execute permissions to a file which has the suid bit set. Example. $ uname -...

SCO Unixware ptrace privilege escalation

ptrace can be attached to suid application...

Hauri Virobot antivirus privilege esalation

Local user can obtain unrestricted access with suid CGI executable...

[SA18296] OpenBSD suid Programs File Re-Opening Vulnerability

TITLE: OpenBSD suid Programs File Re-Opening Vulnerability SECUNIA ADVISORY ID: SA18296 VERIFY ADVISORY: http://secunia.com/advisories/18296/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: Local system OPERATING SYSTEM: OpenBSD 3.x http://secunia.com/product/100/ DESCRIPTION: A...

GLSA-200512-16 : OpenMotif, AMD64 x86 emulation X libraries: Buffer overflows in libUil library

The remote host is affected by the vulnerability described in GLSA-200512-16 OpenMotif, AMD64 x86 emulation X libraries: Buffer overflows in libUil library xfocus discovered two potential buffer overflows in the libUil library, in the diagissuediagnostic and opensourcefile functions. Impact :...

QNX phgrafx buffer overflow

suid application command line parsing buffer overflow...

CVE-2005-3546

suid.cgi scripts in F-Secure 1 Internet Gatekeeper for Linux before 2.15.484 and 2 Anti-Virus Linux Gateway before 2.16 are installed SUID with world-executable permissions, which allows local users to gain privilege...

VERITAS Cluster Server for UNIX buffer overflow

Buffer overflow in 'ha' suid utility on environment variables parsing...

Symantec Norton AntiVirus and another Symantec security products for Macintosh privilege escalation

Norton Antivirus DiskMountNotify suid utility executes external applications by relative name. LiveUpdate contains suid wrapper for Java interpreter without proper command line check...