1395 matches found
GLSA-200409-18 : cdrtools: Local root vulnerability in cdrecord if set SUID root
The remote host is affected by the vulnerability described in GLSA-200409-18 cdrtools: Local root vulnerability in cdrecord if set SUID root Max Vozeler discovered that the cdrecord utility, when set to SUID root, fails to drop root privileges before executing a user-supplied RSH program. By...
cdrtools: Local root vulnerability in cdrecord if set SUID root
Background The cdrtools package is a set of tools for CD recording, including the popular cdrecord command-line utility. Description Max Vozeler discovered that the cdrecord utility, when set to SUID root, fails to drop root privileges before executing a user-supplied RSH program. By default,...
cdrecord $RSH exec() SUID Shell Creation
Exploit for linux platform in category local exploits ======================================== cdrecord $RSH exec SUID Shell Creation ======================================== !/bin/bash cdrecord-suidshell.sh - Iruid CAU 09.2004 Exploits cdrecord's exec of $RSH before dropping privs cat...
CDRecords ReadCD - $RSH exec() SUID Shell Creation
CDRecords ReadCD - $RSH exec SUID Shell Creation !/bin/bash cdrecord-suidshell.sh - Iruid CAU 09.2004 Exploits cdrecord's exec of $RSH before dropping privs cat ./cpbinbash.c include include include main int argc, char argv int fd1, fd2; int count; char buffer1; / Set ID's / setuid geteuid ; setg...
[Full-Disclosure] [ GLSA 200409-11 ] star: Suid root vulnerability
Gentoo Linux Security Advisory GLSA 200409-11 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
GLSA-200409-11 : star: Suid root vulnerability
The remote host is affected by the vulnerability described in GLSA-200409-11 star: Suid root vulnerability A suid root vulnerability exists in versions of star that are configured to use ssh for remote tape access. Impact : Attackers with local user level access could potentially gain root level...
star: Suid root vulnerability
Background star is an enhanced tape archiver, much like tar, that is recognized for it's speed as well as it's enhanced mt/rmt support. Description A suid root vulnerability exists in versions of star that are configured to use ssh for remote tape access. Impact Attackers with local user level...
GLSA-200408-16 : glibc: Information leak with LD_DEBUG
The remote host is affected by the vulnerability described in GLSA-200408-16 glibc: Information leak with LDDEBUG Silvio Cesare discovered a potential information leak in glibc. It allows LDDEBUG on SUID binaries where it should not be allowed. This has various security implications, which may be...
glibc LD_DEBUG privilege escalation
glibc allows LDDEBUG to be applied to suid binaries...
[ GLSA 200408-16 ] glibc: Information leak with LD_DEBUG
Gentoo Linux Security Advisory GLSA 200408-16 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
glibc: Information leak with LD_DEBUG
Background The GNU C library defines various Unix-like "system calls" and other basic facilities needed for a standard POSIX-like application to operate. Description Silvio Cesare discovered a potential information leak in glibc. It allows LDDEBUG on SUID binaries where it should not be allowed...
Mandrake Linux Security Advisory : cdrecord (MDKSA-2003:058-1)
A vulnerability in cdrecord was discovered that can be used to obtain root access because Mandrake Linux ships with the cdrecord binary suid root and sgid cdwriter. Updated packages are provided that fix this vulnerability. You may also elect to remove the suid and sgid bits from cdrecord manuall...
rsbac protection bypass
suid files can be created from jailed processes...
Isoqlog buffer overflow (fake)
Local buffer overflow during configuration parsing in non-suid application. Not exploitable...
[Full-Disclosure] MDKSA-2004:016 - Updated mtools packages fix local root vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: mtools Advisory ID: MDKSA-2004:016 Date: February 25th, 2004 Affected versions: 9.2 Problem Description: Sebastian Krahmer found that the mformat program, when installed suid root, can create any...
smbmnt privilege escalation
Few distributions have smbmnt installed suid root. It allows user to mount external drive and run any application as suid...
CVE-2003-1426
Openwebmail in cPanel 5.0, when run using suid Perl, adds the directory in the SCRIPTFILENAME environment variable to Perl's @INC include array, which allows local users to execute arbitrary code by modifying SCRIPTFILENAME to reference a directory containing a malicious openwebmail-shared.pl...
NSFOCUS SA2003-08: HP-UX libc NLSPATH Environment Variable Privilege Elevation Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NSFOCUS Security AdvisorySA2003-08 Topic: HP-UX libc NLSPATH Environment Variable Privilege Elevation Vulnerability Release Date: 2003-11-13 CVE CAN ID: CAN-2003-0090 http://www.nsfocus.com/english/homepage/research/0308.htm Affected system:...
NSFOCUS SA2003-08: HP-UX libc NLSPATH Environment Variable Privilege Elevation Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NSFOCUS Security AdvisorySA2003-08 Topic: HP-UX libc NLSPATH Environment Variable Privilege Elevation Vulnerability Release Date: 2003-11-13 CVE CAN ID: CAN-2003-0090 http://www.nsfocus.com/english/homepage/research/0308.htm Affected system:...
