CVE-2004-0108

The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107...

DEBIAN-CVE-2004-0108

The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107...

[Full-Disclosure] Utility Manager - Failure to drop system privileges

======================================================================== = Utility Manager - Failure to drop system privileges = = MS Bulletin posted: April 13, 2004 = http://www.microsoft.com/technet/security/Bulletin/MS04-011.mspx = = Affected Software: = Microsoft Windows 2000 = = Public...

Microsoft Windows Utility Manager - Local Privilege Escalation (MS04-011)

Microsoft Windows Utility Manager - Local Privilege Escalation MS04-011 // By Cesar Cerrudo cesar appsecinc com // Local elevation of priviliges exploit for Windows Utility Manager // Gives you a shell with system privileges // If you have problems try changing Sleep values. include include inclu...

MS Windows Utility Manager Local SYSTEM Exploit (MS04-011)

Exploit for unknown platform in category local exploits ========================================================== MS Windows Utility Manager Local SYSTEM Exploit MS04-011 ========================================================== // By Cesar Cerrudo cesar appsecinc com // Local elevation of...

[VulnWatch] [SHATTER Team Security Alert] Microsoft Windows Utility Manager Vulnerability

Microsoft Windows Utility Manager Vulnerability April 13, 2004 Risk Level: High Summary: A local elevation of privileges vulnerability exists on the Windows Utility Manager that allows to any user to take complete control over the operating system. Versions Affected: All products in the Windows...

Microsoft Windows Utility Manager - Local Privilege Escalation (MS04-011)

// By Cesar Cerrudo cesar appsecinc com // Local elevation of priviliges exploit for Windows Utility Manager // Gives you a shell with system privileges // If you have problems try changing Sleep values. include include include include int mainint argc, char argv HWND lHandle, lHandle2; POINT...

Microsoft Windows Utility Manager contains vulnerability in the way it launches applications

Overview Microsoft Windows Utility Manager contains a vulnerability that may permit an authenticated user to launch applications with elevated privileges. Description Microsoft Windows 2000's Utility Manager is a program that permits users to monitor and launch various accessibility applications....

AIX 4.3.35.x - Getlvcb Command Line Argument Buffer Overflow (2)

AIX 4.3.35.x - Getlvcb Command Line Argument Buffer Overflow 2 // source: https://www.securityfocus.com/bid/9905/info getlvcb has been reported to be prone to a buffer overflow vulnerability. When an argument is passed to the getlvcb utility, the string is copied into a reserved buffer in memory...

[SECURITY] [DSA 463-1] New samba packages fix privilege escalation in smbmnt

-------------------------------------------------------------------------- Debian Security Advisory DSA 463-1 [email protected] http://www.debian.org/security/ Matt Zimmerman March 12th, 2004 http://www.debian.org/security/faq -...

Moderate: Red Hat Security Advisory: sysstat security update

Updated sysstat packages that fix various bugs and security issues are now available. Sysstat is a tool for gathering system statistics. Isag is a utility for graphically displaying these statistics. A bug was found in the Red Hat sysstat package post and trigger scripts, which used insecure...

DSA-460 sysstat - insecure temporary file

Bulletin has no description...

Sun Solaris 8/9 Unspecified Passwd Local Root Compromise Vulnerability

Sun Solaris 8/9 Unspecified Passwd Local Root Compromise Vulnerability. CVE-2004-0360. Local exploit for solaris platform source: http://www.securityfocus.com/bid/9757/info Sun has reported an unspecified vulnerability in the passwd utility on Solaris that may permit local attackers to gain...

Multiple Informix IDS bugs

Multiple bugs in different utilities...

HP-UX shar utility creates files with predictable names in "/tmp" directory

Overview The shar program distributed with some versions of the HP-UX operating system creates files insecurely. This vulnerability could allow local users to gain escalated privilege on the system. Description shar is a program commonly available on UNIX systems to create a shell script that wil...

aix __ bos.rte.printers __ format string vulnerability

there is a local and possibly remote format string vulnerability in package bos.rte.printers. feeding /usr/bin/enq with arguments containing formatstring characters it can result in segfault. the research of this problem with acknowledgements of exact arguments and configuration types wasn't done...

Switch Off Multiple Vulnerabilities

Switch Off Multiple Vulnerabilities Credit: Author : Peter Winter-Smith Software: Packages : Switch Off Version : 2.3 and prior Vendor : YaSoft Vendor Url : http://yasoft.km.ru/eng/switchoff/ Vulnerability: Bug Type : Denial of Service; Stack-based Buffer Overflow Severity : Less Critical 1...

CVE-2003-1359

Buffer overflow in stmkfont utility of HP-UX 10.0 through 11.22 allows local users to gain privileges via a long command line argument...

Apple QuickTime/Darwin Streaming Server integer overflow in MP3Broadcaster utility

Overview Apple's QuickTime and Darwin Streaming Server DSS package includes a utility called MP3Broadcaster. This utility contains an integer overflow which may be exploited to cause a denial of service. Description Apple's QuickTime and Darwin Streaming Server is software which provides integrat...

[Full-Disclosure] GnuPG 1.2.3, 1.3.3 external HKP interface format string issue

S-Quadra Advisory 2003-12-03 Topic: GnuPG 1.2.3, 1.3.3 external HKP interface format string issue Severity: Low Vendor URL: http://www.gnupg.org Advisory URL: http://www.s-quadra.com/advisories/Adv-20031203.txt Release date: 3 Dec 2003 1. DESCRIPTION GnuPG is a complete and free replacement for...