Today's Fresh Blogs...

• MOAB-28-01-2007: Apple crashdump Privilege Escalation Vulnerability

  Published: January 28, 2007, 6:54 pm

  Tags: Privilege Escalation

  files with elevated privileges. In couple with a specially crafted Mach-O binary, this can be used to write a malicious crontab entry, which will run with root privileges.Apple crashdump Privilege Escalation VulnerabilityExploit: MOAB-28-01-2007.rb and

  Comments (0)   Blog link Rating: 0

• MOAB-22-01-2007: Apple UserNotificationCenter Privilege Escalation Vulnerability

  Published: January 22, 2007, 11:05 pm

  Tags: Privilege Escalation

  manager will run under wheel privileges. In combination with diskutil and a wheel-writable setuid binary, this allows unprivileged users to gain root privileges.Further information:Apple UserNotificationCenter Privilege Escalation VulnerabilityExploit: MOAB-22-01-2007.rbUpdate: updated exploit (now fat binaries are used, thus

  Comments (0)   Blog link Rating: 0

• MOAB-21-01-2007: System Preferences writeconfig Local Privilege Escalation Vulnerability

  Published: January 21, 2007, 4:19 pm

  Tags: Privilege Escalation

  under root privileges.Further information:System Preferences writeconfig Local Privilege Escalation VulnerabilityExploit: MOAB-21-01-2007.rbThis week will be a really interesting one."Also, I'm pretty sure the SoD realized that writing to an SUID executable clears the SUID bit." -- Thomas Ptacek, Matasano.Actually, the problem

  Comments (0)   Blog link Rating: 0

• MOAB-18-01-2007: Rumpus Multiple Vulnerabilities

  Published: January 18, 2007, 2:42 pm

  Tags: Heap Buffer Overflow, Remote, Privilege Escalation

  service conditions and local privilege escalation issues. Due to the fact that Rumpus works under root privileges, successful exploitation by unprivileged users would allow a full compromise of the system. Most of these issues are related to both FTP and HTTP request parsing, as well as insecure use of the system() function

  Comments (0)   Blog link Rating: 0

• MOAB-17-01-2007: Apple SLP Daemon Service Registration Buffer Overflow Vulnerability

  Published: January 18, 2007, 2:16 am

  Tags: Remote, Privilege Escalation, Memory Corruption

  execution. It would allow unprivileged local (and possibly remote) users to execute arbitrary code under root privileges.For further information:Apple SLP Daemon Service Registration Buffer Overflow VulnerabilityProof of concept: MOAB-17-01-2007.rbThis issue was reported to Apple on 8/2/06 5:31

  Comments (0)   Blog link Rating: 0

• MOAB-15-01-2007: Multiple Mac OS X Local Privilege Escalation Vulnerabilities

  Published: January 15, 2007, 7:00 pm

  Tags: Flawed Design, Privilege Escalation, Diskutil

  OS X installation), allowing privilege escalation. A malicious user can overwrite the binaries and perform a disk permissions repair operation via the diskutil tool, effectively setting back the default ownership and permissions (root setuid).Further information:MOAB-15-01-2007Exploit: MOAB-15-01-2007.rbThanks to Ian Silvester for

  Comments (0)   Blog link Rating: 0

• MOAB-14-01-2007: AppleTalk ATPsndrsp() Heap Buffer Overflow Vulnerability

  Published: January 14, 2007, 11:30 pm

  Tags: Appletalk, Heap Buffer Overflow, Privilege Escalation, Kernel

  code execution by unprivileged users.For further information: AppleTalk ATPsndrsp() Heap Buffer Overflow VulnerabilityProof of concept: MOAB-14-01-2007.cMore to come. In case you want to support the project, consider a donation for the 'get a mini' fund-raising :-). As soon as it gets worked out, advertisement should probably vanish.

  Comments (0)   Blog link Rating: 0

• MOAB-08-01-2007: Application Enhancer (APE) Local Privilege Escalation

  Published: January 8, 2007, 7:18 pm

  Tags: Privilege Escalation, Ape

  one of them is a local privilege escalation vulnerability which allows local users to gain root privileges in the system by either patching the ApplicationEnhancer binary or replacing it. This binary is executed with root privileges and drops them (via setuid to current user id), but the file is actually writable, as well as

  Comments (0)   Blog link Rating: 0

• Ohio law exempts church goers from arrest

  Published: July 8, 2007, 3:21 am

  Tags: Courts, Entanglement, Politics, Believers, Church State, Law, Ohio, Special Privilege, Special Treatment

  Caught this strange news on Austin Cline's blog over at atheism.about.com. In Ohio, if you are traveling to or from work, you can be arrested. If you're traveling to or from a union meeting, you can be arrested. Traveling to or from a political rally? They can arrest you. They can arrest you if... [[Click on the title to visit Secular Left

  Comments (0)   Blog link Rating: 0

• Police On Horseback Charge Small Group

  Published: September 7, 2007, 10:02 am

  Tags: Action, Constitutional Crisis, Executive Privilege, Fear, Corruption In Govt, Peace Movement, Culture, Iraq War, Sumo S Posts, Federal Government, Politics

  Fellow Sirens and friends of the blogosphere…I knew this day would dawn. I’ve seen it coming as I’m sure you all have…but in no clearer way than this story here. George sent his mounted police to charge an outdoor press conference and demonstration against the Iraq War in Washington yesterday. Three freedom [...]

  Comments (0)   Blog link Rating: 0

• america’s slow waking majority

  Published: September 7, 2007, 10:03 am

  Tags: Constitutional Crisis, Executive Privilege, War On Terror, Contempt Of Congress, Corruption In Govt, Iraq War, Betmo S Posts, Federal Government, Culture

  “As America nears the sixth anniversary of the world-churning events of September 11, 2001, a new Zogby International poll finds a majority of Americans still await a Congressional investigation of President Bush' and Vice President Cheney's actions before, during and after the 9/11 attacks. Over 30% also believe Bush and/or Cheney should be

  Comments (0)   Blog link Rating: 0

• Doing what we can

  Published: September 12, 2007, 7:24 pm

  Tags: Fear, International Politics, Wingnuts On Parade, Iran, War On Terror, Executive Privilege, Its About The Oil Stupid, Federal Government, Corruption In Govt, Action, Chickenhawks, Betmo S Posts

  please take a moment and read the following post and the links. the neo cons are pushing hard for iran- and we have little recourse other than contacting as many people as we can. please read: crooks and liars- action alert on IRAN!!!!! spread the word!!! tags: activsim, no war with iran

  Comments (0)   Blog link Rating: 0

• where does that money trail lead?

  Published: September 15, 2007, 3:04 am

  Tags: Economy, Executive Privilege, Corruption In Govt, Federal Government, Betmo S Posts

  i have wondered for a long time where the billions and billions of lost taxpayer’s money has been going. i mean aside from the halliburton contractors in iraq and aside from the halliburton contractors in the gulf region; and the christian mercenaries in both places- oh and the secular mercenaries in both places. [...]

  Comments (0)   Blog link Rating: 0

• Top Five Reasons that Ted Rall (and other white people) should not question the Jena 6 Students

  Published: September 25, 2007, 8:07 pm

  Tags: Al Sharpton, Criminal Justice, Jena 6, Jesse Jackson, John Conyers, Race, Racism, Tedd Rall, White Privilege

  subtle racism, and white privilege. But, in the end, he can’t shake his own white privilege, and he starts second-guessing whether the demand for all the charges to be dropped is correct. Here is Ted Rall’s recent article: here Here is my response: Top Five Reasons Ted Rall (and other white people) should not question the Jena 6

  Comments (0)   Blog link Rating: 0

• The open and shut society

  Published: October 9, 2007, 8:36 pm

  Tags: Nyt, Supreme Court, President, Constitution, Privilege, Duhbya

  Now Duhbya can stop any suit against the government, and the courts can't be bothered to do anything. Right to petition for redress of grievances? Another clause declawed.

  Comments (0)   Blog link Rating: 0