hylafax

There are some format strings vulnerbilities in the lastest hylafax package try faxrm -h x 1 or faxalter -h x -D 1 for "proof of concept". Both faxrm and faxalter are installed setuid uucp on FreeBSD installed from port collection. uid uucp is not that exciting but with some luck you'll find uucp...

LIDS severe bug

Hi. Didn't see a message regarding this one here, so here we go... This is from the Linux Intrusion Detection System LIDS/www.lids.org mailing list. Basically LIDS 0.9.7 for kernel 2.2.16 breaks the system so that every user is acting as uid=0 when the system has been started with /security=0 at...

CVE-1999-0555

A Unix account with a name other than "root" has UID 0, i.e. root privileges...

CVE-2000-0038

glFtpD includes a default glftpd user account with a default password and a UID of 0...

PT-1990-1000 · Nfs · Nfs

Name of the Vulnerable Software and Affected Versions: NFS servers affected versions not specified Description: The issue allows users to gain privileges by creating a writable kmem device and setting the UID to 0 using the mknod command. Recommendations: At the moment, there is no information...