1387 matches found
cdrtools2.0 Format String Vulnerability
---------------------------------------------------------------------------- PACKAGE : cdrtools VERSION : 2.0 SUMMARY : Format String SEVERITY : local root exploit if suid on several distros DATE: : 2003-05-05 ---------------------------------------------------------------------------- Hi, i woul...
NSFOCUS SA2003-02: Solaris lpq Stack Buffer Overflow Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NSFOCUS Security AdvisorySA2003-02 Topic: Solaris lpq Stack Buffer Overflow Vulnerability Release Date: 2003-3-31 CVE CAN ID: CAN-2003-0091 Affected system: =================== Sun Solaris 2.5.1 SPARC/x86 Sun Solaris 2.6 SPARC/x86 Sun Solaris 7...
GLIBC locale - Format Strings
GLIBC locale - Format Strings / su.c by xp, modified by logikal@efnet - tested on redhat 5 - 7 / include include include include include include include include char shellcode = "\x31\xc0\x83\xc0\x17\x31\xdb\xcd\x80\xeb" "\x30\x5f\x31\xc9\x88\x4f\x17\x88\x4f\x1a"...
[CLA-2002:529] Conectiva Linux Security Announcement - XFree86
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- CONECTIVA LINUX SECURITY ANNOUNCEMENT - -------------------------------------------------------------------------- PACKAGE : XFree86 SUMMARY : Local vulnerabilities DATE :...
Buffer overflow in afd
Buffer overflow on long path in suid utils...
qmailadmin SUID buffer overflow
qmailadmin is not part of qmail. It's from http://inter7.com/qmailadmin/ and I guess you can download from there and play with it, although the versions I am using were built from the FreeBSD ports tree and also from a Linux RPM I grabbed from:...
FreeBSD ktrace problem
It's possible to obtain sensitive data from suid process's memory after dropping privileges...
Linux Kernel 2.4.182.4.19 - Privileged File Descriptor Resource Exhaustion (Denial of Service)
Linux Kernel 2.4.182.4.19 - Privileged File Descriptor Resource Exhaustion Denial of Service / source: https://www.securityfocus.com/bid/5178/info The Linux kernel is a freely available, open source kernel originally written by Linus Torvalds. It is the core of all Linux distributions. Recent...
New advisory + exploit from LByte
+- Limpid Byte Advisory 003---------------------------------+ | | | Program: 2fax | | Version: all =2.02 | | OS: Linux/Windows | | Bug: Buffer Overflow in -bpcx option | | Homepage: http://www.atbas.org | | | | Discovered by Crazy Einstein [email protected] | | |...
solaris 9 sparc rcp
hallo, freshly installed solaris 9 sparc. one more suid segfault: bash-2.05$ uname -a SunOS solaris9 5.9 Generic sun4u sparc SUNW,Ultra-510 bash-2.05$ ls -l /usr/sbin/static/rcp -r-sr-xr-x 1 root bin 787700 Apr 6 16:58 /usr/sbin/static/rcp bash-2.05$ /usr/sbin/static/rcp perl -e 'print "A" x 1000...
Interbase 6.0 malloc() issues
====================================================================== Strategic Reconnaissance Team Security Advisory SRT2002-06-17-1043 Topic : Interbase 6.0-1 Date : June 17, 2002 Credit : KF dotslashatsnosoft.com Site : http://www.snosoft.com...
madcr: QnX 4.25 - multiples bof in suid/no suid files
/bin/sample ----------------//------------------------------ cd /bin ls -l sample -rwsrwxr-x 1 root root 20639 Jan 19 1996 sample sample perl -e 'print "A" x 280' Profile based upon 2000 samples/second. //1/bin/sample terminated SIGSEGV at 0005:00000041 1 672 Memory fault sample $perl -e 'print "...
Multiple vulnerabilities in QNX
I think I found what appears to be several or one fundamental vulnerabilities under QNXtested on version 4.25. I have not found any documentation/reference to these anywhere, so I assume they/it were not known. Importance of the bug: any local user can gain root accesswhich, under QNX, means root...
Buffer overflow in Informix
Buffer overflow in few suid/sgid utilities on command line parsing...
latest Progress patch has suid issues AGAIN.
Progress 9.1C11 Patch date 2002/04/26 http://www.progress.com/patches/patchlst/91C-178v.htm Once again by ignoring my warnings and suggestions and even offers to audit code prior to release for the public, Progress Software has happened upon a security hole. If you will recall from last month...
[UNIX] Suid Application Execution May Give Local Root
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...
[SNS Advisory No.51] Compaq Tru64 UNIX libc Buffer Overflow Vulnerability
---------------------------------------------------------------------- SNS Advisory No.51 Compaq Tru64 UNIX libc Buffer Overflow Vulnerability Problem first discovered: Sun, 18 Nov 2001 Published: Thu, 17 Apr 2002 ---------------------------------------------------------------------- Overview:...
[SNS Advisory No.50] Compaq Tru64 UNIX dtprintinfo "-session" Buffer Overflow Vulnerability
---------------------------------------------------------------------- SNS Advisory No.50 Compaq Tru64 UNIX dtprintinfo "-session" Buffer Overflow Vulnerability Problem first discovered: Wed, 10 Oct 2001 Published: Thu, 17 Apr 2002...
A possible buffer overflow in libnewt
Hi! When I am debugging my little program which used libnewt,I found a possible buffer overflow in libnewt. libnewt is widely used by configuration program in redhat.Because there is no suid program use libnewt in my redhat 6.2 environment,it seems this bug can't be used to gain root.But if there...