Ubuntu 4.10 : samba vulnerability (USN-29-1)

During an audit of the Samba 3.x code base Stefan Esser discovered a Unicode file name buffer overflow within the handling of TRANSACT2QFILEPATHINFO replies. A malicious samba user with write access to a share could exploit this by creating specially crafted path names files with very long names...

CVE-2005-4591

CVE-2005-4591 describes a heap-based buffer overflow in bogofilter (and bogolexer during charset conversion) when using Unicode databases. The vulnerability arises from invalid input sequences that trigger heap corruption, allowing remote attackers to cause a crash and potentially execute arbitra...

CVE-2005-4591

Heap-based buffer overflow in bogofilter 0.96.2, 0.95.2, 0.94.14, 0.94.12, and other versions from 0.93.5 to 0.96.2, when using Unicode databases, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via "invalid input sequences" that lead to heap...

CVE-2005-4591

Heap-based buffer overflow in bogofilter 0.96.2, 0.95.2, 0.94.14, 0.94.12, and other versions from 0.93.5 to 0.96.2, when using Unicode databases, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via "invalid input sequences" that lead to heap...

Design/Logic Flaw

rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices...

DEBIAN-CVE-2006-0126

rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices...

CVE-2006-0126

rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices...

CVE-2006-0126

rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices...

CVE-2006-0126

rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices...

CVE-2006-0126

rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices...

CVE-2006-0126

CVE-2006-0126 affects rxvt-unicode prior to 6.3 on platforms that use openpty and non-Unix pty devices (e.g., Linux and most BSDs). The issue is that tty device permissions are not preserved as intended, allowing local users to gain read and write access to the devices. The description specifies ...

CVE-2006-0126

rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices...

CVE-2005-4591: Undefined Security Weakness

Heap-based buffer overflow in bogofilter 0.96.2, 0.95.2, 0.94.14, 0.94.12, and other versions from 0.93.5 to 0.96.2, when using Unicode databases, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via "invalid input sequences" that lead to heap...

[SA18352] Bogofilter Two Denial of Service Vulnerabilities

TITLE: Bogofilter Two Denial of Service Vulnerabilities SECUNIA ADVISORY ID: SA18352 VERIFY ADVISORY: http://secunia.com/advisories/18352/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: bogofilter 0.x http://secunia.com/product/822/ DESCRIPTION: Some vulnerabilities have...

CVE-2006-0126: Undefined Security Weakness

rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices...

[SA18301] rxvt-unicode TTY Device Insecure Permissions Vulnerability

TITLE: rxvt-unicode TTY Device Insecure Permissions Vulnerability SECUNIA ADVISORY ID: SA18301 VERIFY ADVISORY: http://secunia.com/advisories/18301/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: Local system SOFTWARE: rxvt-unicode 5.x http://secunia.com/product/4777/ rxvt-unicode 6.x...

rxvt-unicode weak permissions

Insecure permissions for few tty devices...

Alpha2 Alphanumeric Unicode Uppercase Encoder

Encodes payload as unicode-safe uppercase text. This encoder uses SkyLined's Alpha2 encoding suite. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/encoder/alpha2/unicodeupper' class MetasploitModule...

Alpha2 Alphanumeric Unicode Mixedcase Encoder

Encodes payload as unicode-safe mixedcase text. This encoder uses SkyLined's Alpha2 encoding suite. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/encoder/alpha2/unicodemixed' class MetasploitModule...

Microsoft Windows Server 2000 Kernel - APC Data-Free Local Escalation (MS05-055)

Microsoft Windows Server 2000 Kernel - APC Data-Free Local Escalation MS05-055 / helper.c commented out below ms05-055.c /str0ke / / MS05-055 Windows Kernel APC Data-Free Local Privilege Escalation Vulnerability Exploit Created by SoBeIt 12.25.2005 Main file of exploit Tested on: Windows 2000 PRO...