Today's Fresh Blogs...

• MOAB-28-01-2007: Apple crashdump Privilege Escalation Vulnerability

  Published: January 28, 2007, 6:54 pm

  Tags: Privilege Escalation

  crashdump Privilege Escalation VulnerabilityExploit: MOAB-28-01-2007.rb and

  Comments (0)   Blog link Rating: 0

• MOAB-22-01-2007: Apple UserNotificationCenter Privilege Escalation Vulnerability

  Published: January 22, 2007, 11:05 pm

  Tags: Privilege Escalation

  Privilege Escalation VulnerabilityExploit: MOAB-22-01-2007.rbUpdate: updated exploit (now fat binaries are used, thus exploit should work on a system without XCode and related developer tools; source code is provided to avoid the usual FUD about alleged 'root kits' and non-sense), release information, etc. KF worked hard on

  Comments (0)   Blog link Rating: 0

• MOAB-21-01-2007: System Preferences writeconfig Local Privilege Escalation Vulnerability

  Published: January 21, 2007, 4:19 pm

  Tags: Privilege Escalation

  writeconfig Local Privilege Escalation VulnerabilityExploit: MOAB-21-01-2007.rbThis week will be a really interesting one."Also, I'm pretty sure the SoD realized that writing to an SUID executable clears the SUID bit." -- Thomas Ptacek, Matasano.Actually, the problem isn't 'writing to setuid binaries' but the fact that diskutil "repairs

  Comments (0)   Blog link Rating: 0

• MOAB-18-01-2007: Rumpus Multiple Vulnerabilities

  Published: January 18, 2007, 2:42 pm

  Tags: Heap Buffer Overflow, Remote, Privilege Escalation

  and local privilege escalation issues. Due to the fact that Rumpus works under root privileges, successful exploitation by unprivileged users would allow a full compromise of the system. Most of these issues are related to both FTP and HTTP request parsing, as well as insecure use of the system() function and

  Comments (0)   Blog link Rating: 0

• MOAB-17-01-2007: Apple SLP Daemon Service Registration Buffer Overflow Vulnerability

  Published: January 18, 2007, 2:16 am

  Tags: Remote, Privilege Escalation, Memory Corruption

  slpd is vulnerable to a buffer overflow condition when processing the attr-list field of a registration request, leading to an exploitable denial of service condition and potential arbitrary execution. It would allow unprivileged local (and possibly remote) users to execute arbitrary code under root privileges.For further

  Comments (0)   Blog link Rating: 0

• MOAB-15-01-2007: Multiple Mac OS X Local Privilege Escalation Vulnerabilities

  Published: January 15, 2007, 7:00 pm

  Tags: Flawed Design, Privilege Escalation, Diskutil

  allowing privilege escalation. A malicious user can overwrite the binaries and perform a disk permissions repair operation via the diskutil tool, effectively setting back the default ownership and permissions (root setuid).Further information:MOAB-15-01-2007Exploit: MOAB-15-01-2007.rbThanks to Ian Silvester for donating to

  Comments (0)   Blog link Rating: 0

• MOAB-14-01-2007: AppleTalk ATPsndrsp() Heap Buffer Overflow Vulnerability

  Published: January 14, 2007, 11:30 pm

  Tags: Appletalk, Heap Buffer Overflow, Privilege Escalation, Kernel

  The _ATPsndrsp function is vulnerable to a heap-based buffer overflow condition, due to insufficient checking of user input. This leads to a denial of service condition and potential arbitrary code execution by unprivileged users.For further information: AppleTalk ATPsndrsp() Heap Buffer Overflow VulnerabilityProof of concept:

  Comments (0)   Blog link Rating: 0

• MOAB-08-01-2007: Application Enhancer (APE) Local Privilege Escalation

  Published: January 8, 2007, 7:18 pm

  Tags: Privilege Escalation, Ape

  be abused for privilege escalation.Further information:Application Enhancer (APE) Local Privilege EscalationMandatory exploit: exploit-of-the-apes.rbUpdate: We just received an e-mail suggesting that Unsanity might have fixed this issue silently (replacing their available DMG of the 2.0.2 release with a new one). Until we verify that, we

  Comments (0)   Blog link Rating: 0

• Is the escalation working?

  Published: August 11, 2007, 4:03 pm

  Tags: Bushist, Philosoraptor, Wapo, Media, Iraq, Escalation

  diminished? Early in the escalation, the answer was unequivocally 'no'. More Americans were dying; no fewer Iraqis were dying. Now, I don't know.If the trend in violence is clearly not better, the escalation failed. If it is better, the escalation still has some hope of success.Normally, I would say that judging this is complicated by the

  Comments (0)   Blog link Rating: 0

• Anyone feel a draft?

  Published: August 11, 2007, 4:13 pm

  Tags: Iraq, Draft, Americans Against Escalation

  Brought to you by Americans Against Escalation.

  Comments (0)   Blog link Rating: 0

• Recycling - even Republicans do it

  Published: August 18, 2007, 1:27 pm

  Tags: Nyt, Globe, Cnn, Snow, Bullshit, Media, Iraq, Escalation

  stated that the surge escalation will end sometime in 2008, tripling the length of the plan when President Bush first announced it."Is the whole press corps smoking so much pot that they can't remember hearing this stuff before? Or are they just eager to get over to the RNC cocktail party to graze on primo jumbo shrimp and Grey Goose

  Comments (0)   Blog link Rating: 0

• Goal Posts on the March

  Published: August 24, 2007, 6:34 pm

  Tags: Iraq, Escalation

  we all remember what the escalation was supposed to have achieved, right? Think Progress has the reminder from Bush's announcement of the escalation: When this happens, daily life will improve, Iraqis will gain confidence in their leaders, and the government will have the breathing space it needs to make progress in other critical areas.

  Comments (0)   Blog link Rating: 0

• The first "Take A Stand Day" event

  Published: August 27, 2007, 12:46 pm

  Tags: Iraq, Take Stand, Escalation

  This past Thursday I had the honor of moderating the very first "Take A Stand Day" event. In attendance was Congressman Tom Davis (R-VA) and Rand Beers who gave their assessment of the current situation in Iraq. The event was covered by C-SPAN, The Washington Post, and The Politico.The main focus of our event was to allow Congressman Davis to

  Comments (0)   Blog link Rating: 0

• Take A Stand Day

  Published: August 28, 2007, 9:42 pm

  Tags: Iraq, Americans Against Escalation In Iraq

  campaign Americans Against Escalation in Iraq. Today is Take a Stand Day day. Think Progress reports: From coast to coast, thousands of concerned citizens will turn out to attend "Take a Stand" events and vigils organized by MoveOn.org, including one in Connecticut that will send a message to Sen. Joe Lieberman and Rep. Chris Shays. Iraq war

  Comments (0)   Blog link Rating: 0

• Bush wants $50 billion to pay for his failed, endless escalation

  Published: August 29, 2007, 12:02 pm

  Tags: Iraq, George Bush, Escalation

  Bush wants another $50 billion to pay for his so-called "surge." Clearly, based on the report in today's Washington Post, the Bush administration is being very careful and calculating with its political strategy to obtain the funds. Again, makes one wonder if the war would be going better if Bush and his war cabinet put as much time into

  Comments (0)   Blog link Rating: 0