IBM AIX 4.3 - usrliblpddigest Local Buffer Overflow

IBM AIX 4.3 - usrliblpddigest Local Buffer Overflow / source: https://www.securityfocus.com/bid/2033/info AIX is a version of the UNIX Operating System distributed by IBM. A vulnerability exists in the operating system which could allow a user an elevation in priviledge. The problem occurs in the...

IBM AIX 4.3 - '/usr/lib/lpd/digest' Local Buffer Overflow

/ source: https://www.securityfocus.com/bid/2033/info AIX is a version of the UNIX Operating System distributed by IBM. A vulnerability exists in the operating system which could allow a user an elevation in priviledge. The problem occurs in the digest binary. It is reported that it is possible t...

LIDS severe bug

Hi. Didn't see a message regarding this one here, so here we go... This is from the Linux Intrusion Detection System LIDS/www.lids.org mailing list. Basically LIDS 0.9.7 for kernel 2.2.16 breaks the system so that every user is acting as uid=0 when the system has been started with /security=0 at...

rh 6.2 - gid compromises, etc

Probably it's nothing exciting, but several packets supplied with RH 6.2 will allow 500 gid/uid compromises. On every system it HAS some kind of meaning - sometimes just a little exceeding quotas, hiding from accounting, anonymous intrusions to other systems - but sometimes compromised uucp or ne...

Удаленная дырка в innd

Классическое переполнение буфера в функции sprintf. Теоретически позволяет выполнение кода uid news...

Various Lame Stuff

Hi all, Just a summary of some vulnerabilities that have been covered in the Forbidden Knowledge e-zine lately, which some people on the list may need to know... Covered in Issue Eight --- Proxy Plus www.proxyplus.cz has various insecure default settings. NiteServer FTPd is vulnerable to several...

Buffer overflows in Skyline/SpinBox client

There are some buffer overflows in SpinBox/1.1 from the spinserver.conf. SpinBox is an SSI/cgi-tool used by advertisement companies, made by Skyline. Since this is closed source software, I can't post the sources. The buffer overflows are mostly in the query string strcat and strcpy instead of...

CVE-2000-0038

CVE-2000-0038 concerns glFtpD (glftpd) software where a default glftpd user account exists with a default password and a UID of 0. The vulnerability is tied to this account’s privileged UID, enabling potential unauthorized access or privilege elevation. The PT-1999-1846 entry notes affected versi...

CVE-1999-0555

CVE-1999-0555 describes a UID 0 issue where a Unix account whose name is not "root" has root privileges. Multiple connected sources corroborate that any non-root-named account can effectively gain full control, exposing complete confidentiality, integrity, and availability impact. Red Hat and PT-...

CVE-1999-0169

This entry documents CVE-1999-0169 affecting NFS, where an attacker can read and write any file on the system by specifying a false UID. The vulnerability centers on the NFS service’s UID handling, enabling full confidentiality and integrity/availability impact per the provided metrics. Connected...

CVE-1999-0555

A Unix account with a name other than "root" has UID 0, i.e. root privileges...

CVE-2000-0038

glFtpD includes a default glftpd user account with a default password and a UID of 0...

CVE-1999-0556

Two or more Unix accounts sharing the same UID is the core issue described for CVE-1999-0556. Affected systems are Unix-based where UID collisions can enable unauthorized access or privilege escalation because multiple accounts map to the same user identifier. Connected sources corroborate the de...

CVE-1999-0556: Undefined Security Weakness

Two or more Unix accounts have the same UID...

CVE-2000-0038: Undefined Security Weakness

glFtpD includes a default glftpd user account with a default password and a UID of 0...

CVE-1999-0169: Undefined Security Weakness

NFS allows attackers to read and write any file on the system by specifying a false UID...

CVE-1999-0555: Undefined Security Weakness

A Unix account with a name other than "root" has UID 0, i.e. root privileges...

CVE-2000-0038

glFtpD includes a default glftpd user account with a default password and a UID of 0...

RFP9905.zeus.remote.root.txt

--- Advisory RFP9905 ------------------------------- rfp.labs ----------- Remote root compromise via Zeus webserver Zeus-search vulnerability --------------------------------- rain forest puppy / [email protected] -- Table of contents: - 1. Scope of problem - 2. Solution - 3. Miscellaneous Updates...

CVE-1999-0084

CVE-1999-0084 affects certain NFS servers . The vulnerability permits a local user to perform a privileged action by running mknod to create a writable kmem device and set the UID to 0, effectively enabling a privilege escalation to root as described in the provided sources. Multiple connected do...