| -[[ 20 december ]]- |
|
| [-name-] |
[-platform/daemon-] |
[-description-] |
[-type-] |
[-author-] |
| obsd-ftpd.c |
openbsd 2.7 / 2.6 |
n/a |
remote |
scrippie |
| dsniff-2.3.tar.gz |
sshd |
monkey-in-the-middle ssh1 hijaacking |
remote |
dug song |
| catman-race2.pl |
solaris sparc 2.7 |
tmp symlink will clobber files |
dos |
lwc |
| 7350oftpd.tar.gz |
openbsd 2.8 / 2.7 / 2.6 |
n/a |
remote |
caddis |
| |
| -[[ 19 december ]]- |
|
| [-name-] |
[-platform/daemon-] |
[-description-] |
[-type-] |
[-author-] |
| fm.c |
firewall-1 |
bypass firewalled/blocked services |
remote |
unknown |
| pqwak2.zip |
win(me/98/95) |
share level password authentication flaw |
remote |
shane hird |
| catman-race.pl |
solaris sparc 2.7 |
tmp symlink will clobber files |
dos |
lwc |
| |
| -[[ 15 december ]]- |
|
| [-name-] |
[-platform/daemon-] |
[-description-] |
[-type-] |
[-author-] |
| oopz.c |
freebsd 4.0 |
n/a |
remote |
diman |
| xsold.c |
redhat 6.2 |
-display stack overflow |
local |
zorgon |
| rdc-lprng.c |
redhat 7.0 / lpd |
format string exploit |
remote |
venomous |
| mon_pine.sh |
redhat 6.2 |
users can steal each others mail |
local |
mat |
| |
| -[[ 11 december ]]- |
|
| [-name-] |
[-platform/daemon-] |
[-description-] |
[-type-] |
[-author-] |
| helot.c |
ircd |
n/a |
remote |
nimrood |
| bftpd.c |
ftpd |
stack overflow |
remote |
korty |
| lpd-ex.c |
redhat 7.0 / lpd |
format string exploit |
remote |
sk8 |
| seclpd.c |
redhat 7.0 / lpd |
format string exploit |
remote |
digit |
| |
| -[[ 6 december ]]- |
|
| [-name-] |
[-platform/daemon-] |
[-description-] |
[-type-] |
[-author-] |
| phpxpl.c |
slackware 7.0 |
php format strings bug |
remote |
gneisenau |
| hhp-kwintv_smash.c |
suse 7.0 |
home enviroment overflow |
local |
loophole |
| hhp-gnomesegv_smash.c |
suse 6.4 |
gnomelib enviroment overflow |
local |
loophole |
| hhp-gnomescott_smash.c |
suse 6.4 |
gnomelib enviroment overflow |
local |
loophole |
| |
| -[[ 4 december ]]- |
|
| [-name-] |
[-platform/daemon-] |
[-description-] |
[-type-] |
[-author-] |
| bashack.c |
redhat 6.1 |
multiple subsystem errors allowing root |
local |
zen |
| hhp-expect_smash.c |
slackware 7.1 |
home enviroment overflow |
local |
isox |
| hhp-gnomehack_smash.c |
debian 2.2 |
home enviroment overflow |
local |
loophole |
| |
| -[[ 2 december ]]- |
|
| [-name-] |
[-platform/daemon-] |
[-description-] |
[-type-] |
[-author-] |
| jolt2.c |
firewall-1 |
fragmented packet flood causes lockup |
dos |
phonix |
| mount.c |
slackware 7 / redhat 6.2 |
glibc locale bug |
local |
sk8 |
| dislocate.c |
debian 2.2 |
heap mismanagement overflow |
local |
michel kaempf |
| 7350nxt-v3.tar.gz |
linux / freebsd / solaris / irix |
bind 8.2 & 8.2.1)nxt stack overflow |
remote |
zc- & -z |
| |
| -[[ 1 december ]]- |
|
| [-name-] |
[-platform/daemon-] |
[-description-] |
[-type-] |
[-author-] |
| phx.c |
cgi |
stack overflow |
remote |
proton |
| urban2.c |
hpux 11.00 |
format string exploit |
remote |
venglin |
| super-sadmin.c |
solaris x86/sparc 2.7/2.6 |
n/a |
remote |
optyx |
| |
|
|
|
|
| [comments? gov-boi@hack.co.za] |
EOF
|