Restore and Dump Local Exploit

Exploit for linux platform in category local exploits ============================== Restore and Dump Local Exploit ============================== !/usr/bin/perl perl exploit of restore and dump redhat linux 6.2 written by tlabs Use at your discretion $EXPORT1="TAPE=garbage:garbage" ;...

Oracle (oidldapd connect) - Local Command Line Overflow

/ Exploit Code for oidldapd in Oracle 8.1.6 8ir2 for Linux. I tested in RH 6.2 and 6.1. This code is a bullshit i know please no comments about ;-. If someone exports this to Sparc please tell me. synopsis: buffer overflow in oidldapd impact: any user gain euid=oracle. Dedicated to PlazaSite guys...

Локальная дырка в IIS (.ASP buffer overflow)

Длинный параметр LANGUAGE тага SCRIPT приводит к переполнению буфера на сервере, что позволяет локальному пользователю получить привилегии системы. В сочетании с другими ошибками может привести к удаленной атаке...

CVE-2000-0698

Minicom 1.82.1 and earlier on some Linux systems allows local users to create arbitrary files owned by the uucp user via a symlink attack...

CVE-2000-0737

The Service Control Manager SCM in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain administrator privileges, aka the "Service Control Manager Named Pipe Impersonation" vulnerability...

CVE-2000-0602

Secure Locate slocate in Red Hat Linux allows local users to gain privileges via a malformed configuration file that is specified in the LOCATEPATH environmental variable...

Ipswitch IMail 6.x - File Attachment

Ipswitch IMail 6.x - File Attachment source: https://www.securityfocus.com/bid/1617/info IPSWITCH ships a product titled IMail, an email server for usage on NT servers serving clients their mail via a web interface. To this end the IMail server provides a web server typically running on port 8383...

Security Update: ld.so unsetenv problem

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Caldera Systems, Inc. Security Advisory Subject: ld.so unsetenv problem Advisory number: CSSA-2000-028.0 Issue date: 2000 August, 24 Cross reference: 1. Problem Description A bug has been discovered in ld.so that could allow local users to obtain supe...

CVE-2000-0013

IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the midikeys program...

CVE-2000-0393

The CVE-2000-0393 issue affects the KDE kscd program. It does not drop privileges when executing a program specified in a user’s SHELL environment variable, allowing a local user to gain privileges by directing kscd to run an alternate program. The description only states the vulnerability; it do...

FreeBSD-SA-00:22.apsfilter

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:22 Security Advisory FreeBSD, Inc. Topic: apsfilter allows users to execute arbitrary commands as user lpd Category: ports Module: apsfilter Announced: 2000-06-07 Credits...

FreeBSD-SA-00:14.imap-uw

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:14 Security Advisory FreeBSD, Inc. Topic: imap-uw contains security vulnerabilities for "closed" mail servers Category: ports Module: imap-uw Announced: 2000-04-24...

CVE-1999-0888

dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLEHOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script...

CVE-1999-0114

CVE-1999-0114 (Elm 2.4 mail package) : The Elm mail package (elm-2.4) is affected via the filter command, where a symlink attack lets local users execute commands as other users and read other users’ files. Root cause is a directory/file permission/symlink handling flaw in the filter command. Imp...

CVE-1999-0862

Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file...

CVE-2000-0078

The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the awk command...

CVE-1999-0900

Buffer overflow in rpc.yppasswdd allows a local user to gain privileges via MD5 hash generation...

Majordomo 1.94.4/1.94.5 - Local -C Parameter (2)

// source: https://www.securityfocus.com/bid/903/info It is possible for a local user to gain majordomo privileges through a vulnerability which allows privileged arbitrary commands to be executed. If the -C parameter is passed to majordomo or one of several other scripts when run with the setuid...

Majordomo 1.94.4/1.94.5 - Local -C Parameter (1)

source: https://www.securityfocus.com/bid/903/info It is possible for a local user to gain majordomo privileges through a vulnerability which allows privileged arbitrary commands to be executed. If the -C parameter is passed to majordomo or one of several other scripts when run with the setuid ro...

Microsoft Windows 95/98/NT 4.0 - Help File Backdoor

source: https://www.securityfocus.com/bid/868/info The help files for the Windows Help system .cnt, .hlp can be edited so that they run an arbitrary executable when selected by a user. The executable will run at the privelege level of the user. The .cnt files are like tables of contents that tell...