Mandrake Linux Security Advisory : cvs (MDKSA-2003:009)

Two vulnerabilities were discoverd by Stefen Esser in the cvs program. The first is an exploitable double free bug within the server, which can be used to execute arbitrary code on the CVS server. To accomplish this, the attacker must have an anonymous read-only login to the CVS server. The secon...

PT-2002-2591 · Heysoft +1 · Heysoft Eventsave +1

Name of the Vulnerable Software and Affected Versions: Heysoft EventSave versions 5.1 through 5.2 Heysoft EventSave+ versions 5.1 through 5.2 Description: The issue allows attackers to prevent events from being recorded by opening the log file using an application such as Microsoft's Event Viewer...

Microsoft IIS 5.0 - In-Process Table Privilege Escalation

Microsoft IIS 5.0 - In-Process Table Privilege Escalation source: https://www.securityfocus.com/bid/3193/info A vulnerability exists in Microsoft's Internet Information Services 5.0 which could allow a user with write permission to run any code with System privileges...

Microsoft IIS 5.0 - In-Process Table Privilege Escalation

source: https://www.securityfocus.com/bid/3193/info A vulnerability exists in Microsoft's Internet Information Services 5.0 which could allow a user with write permission to run any code with System privileges...

vulnerability in oracle binary in Oracle 8.0.5 - 8.1.6

WWW.PLAZASITE.COM System & Security Division Title: Vulnerability in oracle binary in Oracle 8.0.5 Date: 11-12-2000 Platform: Only tested in Linux, but can be "exported" to others. Impact: Any user compromise any file owned by oracle DDBB owner. Author: Juan Manuel Pascual [email protected]...

Oracle Internet Directory LDAP Daemon does not check write permissions properly

Overview The Oracle LDAP Daemon oidldapd version 2.1.1.1, which ships with Oracle version 8i for Linux version 8.1.7, does not check write permissions properly. This can allow a local user to delete or write to any file on the system. Description The Oracle LDAP Daemon oidldapd version 2.1.1.1 do...

Solaris 7.0 - chkperm Local Privilege Escalation

Solaris 7.0 - chkperm Local Privilege Escalation source: https://www.securityfocus.com/bid/295/info Solaris 2.4, 2.5, and 2.5.1 possibly other versions have a package called FACE Framed Access Command Environment installed. Included in the package is a program called chkperm which checks a file t...