| -[[
20 december ]]- |
|
| [-name-] |
[-platform/daemon-] |
[-description-] |
[-type-] |
[-author-] |
| obsd-ftpd.c |
openbsd
2.7 / 2.6 |
n/a |
remote |
scrippie |
| dsniff-2.3.tar.gz |
sshd |
monkey-in-the-middle
ssh1 hijaacking |
remote |
dug
song |
| catman-race2.pl |
solaris
sparc 2.7 |
tmp
symlink will clobber files |
dos |
lwc |
| 7350oftpd.tar.gz |
openbsd
2.8 / 2.7 / 2.6 |
n/a |
remote |
caddis |
| |
| -[[
19 december ]]- |
|
| [-name-] |
[-platform/daemon-] |
[-description-] |
[-type-] |
[-author-] |
| fm.c |
firewall-1 |
bypass
firewalled/blocked services |
remote |
unknown |
| pqwak2.zip |
win(me/98/95) |
share
level password authentication flaw |
remote |
shane
hird |
| catman-race.pl |
solaris
sparc 2.7 |
tmp
symlink will clobber files |
dos |
lwc |
| |
| -[[
15 december ]]- |
|
| [-name-] |
[-platform/daemon-] |
[-description-] |
[-type-] |
[-author-] |
| oopz.c |
freebsd
4.0 |
n/a |
remote |
diman |
| xsold.c |
redhat
6.2 |
-display
stack overflow |
local |
zorgon |
| rdc-lprng.c |
redhat
7.0 / lpd |
format
string exploit |
remote |
venomous |
| mon_pine.sh |
redhat
6.2 |
users
can steal each others mail |
local |
mat |
| |
| -[[
11 december ]]- |
|
| [-name-] |
[-platform/daemon-] |
[-description-] |
[-type-] |
[-author-] |
| helot.c |
ircd |
n/a |
remote |
nimrood |
| bftpd.c |
ftpd |
stack
overflow |
remote |
korty |
| lpd-ex.c |
redhat
7.0 / lpd |
format
string exploit |
remote |
sk8 |
| seclpd.c |
redhat
7.0 / lpd |
format
string exploit |
remote |
digit |
| |
| -[[
6 december ]]- |
|
| [-name-] |
[-platform/daemon-] |
[-description-] |
[-type-] |
[-author-] |
| phpxpl.c |
slackware
7.0 |
php
format strings bug |
remote |
gneisenau |
| hhp-kwintv_smash.c |
suse
7.0 |
home
enviroment overflow |
local |
loophole |
| hhp-gnomesegv_smash.c |
suse
6.4 |
gnomelib
enviroment overflow |
local |
loophole |
| hhp-gnomescott_smash.c |
suse
6.4 |
gnomelib
enviroment overflow |
local |
loophole |
| |
| -[[
4 december ]]- |
|
| [-name-] |
[-platform/daemon-] |
[-description-] |
[-type-] |
[-author-] |
| bashack.c |
redhat
6.1 |
multiple
subsystem errors allowing root |
local |
zen |
| hhp-expect_smash.c |
slackware
7.1 |
home
enviroment overflow |
local |
isox |
| hhp-gnomehack_smash.c |
debian
2.2 |
home
enviroment overflow |
local |
loophole |
| |
| -[[
2 december ]]- |
|
| [-name-] |
[-platform/daemon-] |
[-description-] |
[-type-] |
[-author-] |
| jolt2.c |
firewall-1 |
fragmented
packet flood causes lockup |
dos |
phonix |
| mount.c |
slackware
7 / redhat 6.2 |
glibc
locale bug |
local |
sk8 |
| dislocate.c |
debian
2.2 |
heap
mismanagement overflow |
local |
michel
kaempf |
| 7350nxt-v3.tar.gz |
linux
/ freebsd / solaris / irix |
bind
8.2 & 8.2.1)nxt stack overflow |
remote |
zc-
& -z |
| |
| -[[
1 december ]]- |
|
| [-name-] |
[-platform/daemon-] |
[-description-] |
[-type-] |
[-author-] |
| phx.c |
cgi |
stack
overflow |
remote |
proton |
| urban2.c |
hpux
11.00 |
format
string exploit |
remote |
venglin |
| super-sadmin.c |
solaris
x86/sparc 2.7/2.6 |
n/a |
remote |
optyx |
| |
|
|
|
|
| [comments? gov-boi@hack.co.za] |
EOF
|