Linux Kernel 2.2.x - sysctl() Memory Reading

Linux Kernel 2.2.x - sysctl Memory Reading / source: https://www.securityfocus.com/bid/2364/info The Linux Kernel is the core of the Linux Operating System. It was originally written by Linus Torvalds, and is publicly maintained. A problem in the Linux kernel may allow root compromise. The sysctl...

Tru64 5 - su Env Local Stack Overflow

Tru64 5 - su Env Local Stack Overflow / Copyright c 2000 ADM / / All Rights Reserved / / THIS IS UNPUBLISHED PROPRIETARY SOURCE CODE OF ADM / / The copyright notice above does not evidence any / / actual or intended publication of such source code. / / / / Title: Tru64 5 su / / Tested under: Tru6...

HP-UX 11.0 /bin/cu Privilege Escalation Exploit

Exploit for hp-ux platform in category local exploits =============================================== HP-UX 11.0 /bin/cu Privilege Escalation Exploit =============================================== / Copyright c 2001 Zorgon All Rights Reserved The copyright notice above does not evidence any actu...

Solaris 2.5 / 2.5.1 getgrnam() Local Overflow Exploit

Exploit for solaris platform in category local exploits ===================================================== Solaris 2.5 / 2.5.1 getgrnam Local Overflow Exploit ===================================================== include include / getgrnam function overflow. works against Solaris 2.5/2.5.1 SPA...

BFTPd 1.0.12 Remote Exploit

Exploit for linux platform in category remote exploits =========================== BFTPd 1.0.12 Remote Exploit =========================== / Creates a filname to exploit the bug in bftpd 1.0.12 Create the file, cwd in the shell directory and nlist the file directory. Coded by korty / include...

Microsoft IIS 5.0 - 'Translate: f' Source Disclosure (1)

source: https://www.securityfocus.com/bid/1578/info Microsoft IIS 5.0 has a dedicated scripting engine for advanced file types such as ASP, ASA, HTR, etc. files. The scripting engines handle requests for these file types, processes them accordingly, and then executes them on the server. It is...

Local root compromise in GNQS 3.50.6 and 3.50.7

A large security hole was uncovered last month in Generic-NQS ver. 3.50.6 and 3.50.7. This hole leads to immediate local root compromise. All users of those versions are requested to upgrade to ver. 3.50.8 or later ASAP. The updated package can be downloaded from...

AnalogX SimpleServer:WWW 1.0.3 - Denial of Service

AnalogX SimpleServer:WWW 1.0.3 - Denial of Service source: https://www.securityfocus.com/bid/1076/info Requesting a URL containing a string of exactly eight characters following the /cgi-bin/ directory 17 characters in total will cause AnalogX SimpleServer:WWW to shut down. http://target/cgi-bin/...

linux_stealth_module.txt

Subject: yet another article about stealth modules in linux. To: [email protected] abtrom: anti btrom .................. Preface: ........ I've seen many stealth modules for Linux. New ways of of hiding the modules are found, so the 'lsmod' cant find them, etc, etc. But the problem is tha...

digital-unix4.0-asm-shell.txt

Date: Tue, 26 Jan 1999 15:18:08 -0500 From: Seth Michael McGann To: [email protected] Subject: Re: Digital Unix 4.0 exploitable buffer overflows On Mon, 25 Jan 1999, Lamont Granquist wrote: Previously Digital Unix has been relatively immune to buffer overflow attacks due to the lack of an...

ms.exchange.outlook.javascript.txt

Date: Fri, 5 Mar 1999 11:30:56 -0000 From: Mat Newman To: "'[email protected]'" Subject: Exchange server web access You may have heard about this but... If someone is accessing Exchange server via the web then you can embed javascript into the email to get it to delete the contents of...

Debian 2.02.0 r5 FreeBSD 3.2 OpenBSD 2.4 RedHat 5.2 i386 S.u.S.E 6.1 - Lsof Local Buffer Overflow (1)

Debian 2.02.0 r5 FreeBSD 3.2 OpenBSD 2.4 RedHat 5.2 i386 S.u.S.E 6.1 - Lsof Local Buffer Overflow 1 // source: https://www.securityfocus.com/bid/496/info // // Lsof is an open file management utility included with many linux distributions. When run setuid root or setgid kmem, it is subject to a...