[VulnWatch] [SHATTER Team Security Alert] Microsoft Windows Utility Manager Vulnerability

Microsoft Windows Utility Manager Vulnerability April 13, 2004 Risk Level: High Summary: A local elevation of privileges vulnerability exists on the Windows Utility Manager that allows to any user to take complete control over the operating system. Versions Affected: All products in the Windows...

Microsoft Windows Utility Manager - Local Privilege Escalation (MS04-011)

// By Cesar Cerrudo cesar appsecinc com // Local elevation of priviliges exploit for Windows Utility Manager // Gives you a shell with system privileges // If you have problems try changing Sleep values. include include include include int mainint argc, char argv HWND lHandle, lHandle2; POINT...

Microsoft Windows Utility Manager contains vulnerability in the way it launches applications

Overview Microsoft Windows Utility Manager contains a vulnerability that may permit an authenticated user to launch applications with elevated privileges. Description Microsoft Windows 2000's Utility Manager is a program that permits users to monitor and launch various accessibility applications....

AIX 4.3.35.x - Getlvcb Command Line Argument Buffer Overflow (2)

AIX 4.3.35.x - Getlvcb Command Line Argument Buffer Overflow 2 // source: https://www.securityfocus.com/bid/9905/info getlvcb has been reported to be prone to a buffer overflow vulnerability. When an argument is passed to the getlvcb utility, the string is copied into a reserved buffer in memory...

[SECURITY] [DSA 463-1] New samba packages fix privilege escalation in smbmnt

-------------------------------------------------------------------------- Debian Security Advisory DSA 463-1 [email protected] http://www.debian.org/security/ Matt Zimmerman March 12th, 2004 http://www.debian.org/security/faq -...

Moderate: Red Hat Security Advisory: sysstat security update

Updated sysstat packages that fix various bugs and security issues are now available. Sysstat is a tool for gathering system statistics. Isag is a utility for graphically displaying these statistics. A bug was found in the Red Hat sysstat package post and trigger scripts, which used insecure...

DSA-460 sysstat - insecure temporary file

Bulletin has no description...

Sun Solaris 8/9 Unspecified Passwd Local Root Compromise Vulnerability

Sun Solaris 8/9 Unspecified Passwd Local Root Compromise Vulnerability. CVE-2004-0360. Local exploit for solaris platform source: http://www.securityfocus.com/bid/9757/info Sun has reported an unspecified vulnerability in the passwd utility on Solaris that may permit local attackers to gain...

Multiple Informix IDS bugs

Multiple bugs in different utilities...

HP-UX shar utility creates files with predictable names in "/tmp" directory

Overview The shar program distributed with some versions of the HP-UX operating system creates files insecurely. This vulnerability could allow local users to gain escalated privilege on the system. Description shar is a program commonly available on UNIX systems to create a shell script that wil...

aix __ bos.rte.printers __ format string vulnerability

there is a local and possibly remote format string vulnerability in package bos.rte.printers. feeding /usr/bin/enq with arguments containing formatstring characters it can result in segfault. the research of this problem with acknowledgements of exact arguments and configuration types wasn't done...

Switch Off Multiple Vulnerabilities

Switch Off Multiple Vulnerabilities Credit: Author : Peter Winter-Smith Software: Packages : Switch Off Version : 2.3 and prior Vendor : YaSoft Vendor Url : http://yasoft.km.ru/eng/switchoff/ Vulnerability: Bug Type : Denial of Service; Stack-based Buffer Overflow Severity : Less Critical 1...

CVE-2003-1359

Buffer overflow in stmkfont utility of HP-UX 10.0 through 11.22 allows local users to gain privileges via a long command line argument...

Apple QuickTime/Darwin Streaming Server integer overflow in MP3Broadcaster utility

Overview Apple's QuickTime and Darwin Streaming Server DSS package includes a utility called MP3Broadcaster. This utility contains an integer overflow which may be exploited to cause a denial of service. Description Apple's QuickTime and Darwin Streaming Server is software which provides integrat...

[Full-Disclosure] GnuPG 1.2.3, 1.3.3 external HKP interface format string issue

S-Quadra Advisory 2003-12-03 Topic: GnuPG 1.2.3, 1.3.3 external HKP interface format string issue Severity: Low Vendor URL: http://www.gnupg.org Advisory URL: http://www.s-quadra.com/advisories/Adv-20031203.txt Release date: 3 Dec 2003 1. DESCRIPTION GnuPG is a complete and free replacement for...

Morpheus discloses username to remote users

Overview The usernames disclosed by the Morpheus peer-to-peer file sharing application do not present a security vulnerability. Description Morpheus is a peer-to-peer file sharing application that allows users to search for and download files from other Morpheus users. This product allegedly...

FlexWATCH.txt

------------------ u0xa ------------------------ Author: SLAIZER mail: slaizeratphreaker.net Date: Sun/Oct/26/2003 -------"Another way of seeing the things"-------- ------------------------------------------------- Unauthorized access Vulnerability in FlexWATCH camera Server...

Centrinity FirstClass HTTP Server 7.1 - Directory Disclosure

source: https://www.securityfocus.com/bid/8920/info It has been reported that Centrinity FirstClass HTTP server may be prone to an information disclosure vulnerability that may allow a remote attacker to disclose listings for server root and user web directories on a vulnerable system. This issue...

PSCS VPOP3 2.0 Email Server WebAdmin - Cross-Site Scripting

source: https://www.securityfocus.com/bid/8869/info It has been reported that PSCS VPOP3 Email Server may be prone to a cross-site scripting vulnerability that may allow a remote attacker to embed malicious HTML and script code in a link. The issue is reported to be present in the WebAdmin utilit...

Man Utility 2.3.19 - Local Compression Program Privilege Escalation

Man Utility 2.3.19 - Local Compression Program Privilege Escalation source: https://www.securityfocus.com/bid/8675/info A vulnerability has been reported in man that may allow an attacker to gain elevated privileges. The problem lies in man failing to carry out sufficient sanity checks before...