1394 matches found
Buffer overflow in Informix
Buffer overflow in few suid/sgid utilities on command line parsing...
latest Progress patch has suid issues AGAIN.
Progress 9.1C11 Patch date 2002/04/26 http://www.progress.com/patches/patchlst/91C-178v.htm Once again by ignoring my warnings and suggestions and even offers to audit code prior to release for the public, Progress Software has happened upon a security hole. If you will recall from last month...
[UNIX] Suid Application Execution May Give Local Root
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...
[SNS Advisory No.51] Compaq Tru64 UNIX libc Buffer Overflow Vulnerability
---------------------------------------------------------------------- SNS Advisory No.51 Compaq Tru64 UNIX libc Buffer Overflow Vulnerability Problem first discovered: Sun, 18 Nov 2001 Published: Thu, 17 Apr 2002 ---------------------------------------------------------------------- Overview:...
[SNS Advisory No.50] Compaq Tru64 UNIX dtprintinfo "-session" Buffer Overflow Vulnerability
---------------------------------------------------------------------- SNS Advisory No.50 Compaq Tru64 UNIX dtprintinfo "-session" Buffer Overflow Vulnerability Problem first discovered: Wed, 10 Oct 2001 Published: Thu, 17 Apr 2002...
A possible buffer overflow in libnewt
Hi! When I am debugging my little program which used libnewt,I found a possible buffer overflow in libnewt. libnewt is widely used by configuration program in redhat.Because there is no suid program use libnewt in my redhat 6.2 environment,it seems this bug can't be used to gain root.But if there...
Buffer overflow in Compaq Tru64 Unix suid utilities
Buffer overflows in at and mailcv suitd root utilities...
Переполнение буфера в mtr (buffer overflow)
Переполнение буфера в suid-приложении дает возможность использования RAW-сокета...
Censoft TERM Emu bOf
Vendor: www.censoft.com Product: TERM for UNIX / Linux Emulations Wyse 60, SCO ANSI, VT220 Terminal Supports SCO, AIX, HP, DEC, Solaris Operating Environmenttm software, and Linuxtm I WAS going to purchase this product after trying the eval however I changed my mind for some reason...I would...
Ошибка форматной строки в функциях Unixware message catalog (format string)
Ошибка форматной строки почти во всех suid-приложениях...
Переполнение буфера в hanterm (buffer overflow)
Переполнение буфера в suid-приложении...
Hanterm 3.3 - Local Buffer Overflow (2)
Hanterm 3.3 - Local Buffer Overflow 2 // source: https://www.securityfocus.com/bid/4050/info Hanterm is a replacement for xterm which includes Hangul support, used for Korean language systems. A buffer overflow error exists in hanterm. If it is called locally with a maliciously constructed...
Повышение привелегий через scoadminreg.cgi в Unixware (privelege escalation)
Суид-приложение scoadminreg.cgi может быть запущено локально...
Re: uucp --config patch -- not sufficient
On debian the uucp and uux binaries are owned by the uucp user. Additionally /usr/lib/uucp is writeable by the uucp user. This allows us to have some fun since we don't have that nasty makewhatis, but we can still get root by trojaning uucp and uux and hoping a root owned process executes either...
Проблемы ptrace() в OpenBSD/NetBSD (privelege escalation)
С помощью ptrace можно изменить последовательность выполнения suid-приложения...
Символьные линки в cdrdao (symbolic links)
При записи конфигурационного файла в suid root приложении не проверяются символьные линки...
Advisory: popauth
Hi, there is a symlink problem in the popauth utility, which is part of the qpoper package. The binary is often istalled suid pop and follows symlinks in the -trace file option. This problem has been reported to vendors in June 2001. Impact: in case of suid popauth and valid shell for user pop, t...
Проблема с асинхронным вводом/выводом в FreeBSD (privelege escalation)
Результат отложенной процедуры после exec может переписать память suid-процесса...
oracle8.exploit.txt
---------- Forwarded message ---------- Date: Sat, 13 Nov 1999 15:01:08 -0600 From: [email protected] To: [email protected] Subject: BOUNCE [email protected]: Approval required: From [email protected] Sat Nov 13 15:01:06 1999 Received: from sword.damocles.com...