what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files Date: 2003-02-13

iDEFENSE Security Advisory 2003-02-12.t

Posted Feb 13, 2003

Authored by Euan Briggs, iDefense Labs | Site idefense.com

IBM's AIX contains a locally exploitable buffer overflow in libIM which allows attackers to execute code with the privileges of an application calling the library. The "/usr/lpp/X11/bin/aixterm" binary calls the libIM library and is then installed setuid root by default on AIX. The "-im" command line argument used by aixterm causes the binary to crash when filled with a string about 50 bytes in length, allowing attackers to control the return address and run code as root.

tags | advisory, overflow, root

systems | aix

SHA-256 | d48b6926c82ffe75c223b8a03b1f5182ccf081eafc0e952920b165ba77191d02

Download | Favorite | View

RHSA-2002:202-33.txt

Posted Feb 13, 2003

Authored by Red Hat Security | Site redhat.com

Red Hat Security Advisory RHSA-2002:202-33 - Python v2.2.1 and below has a temp file vulnerability in os._execvpe from os.py which allows local users to execute arbitrary code via a symlink attack.

tags | arbitrary, local, python

systems | linux, redhat

SHA-256 | 822772e745db7d21b2b9bc4fe2db053ac18299cff1d54f0118e3c00554dd3e0e

Download | Favorite | View