512 matches found
Watchguard XCS FixCorruptMail Local Privilege Escalation Exploit
This Metasploit module exploits a vulnerability in the Watchguard XCS 'FixCorruptMail' script called by root's crontab which can be exploited to run a command as root within 3 minutes. This module requires Metasploit: http://metasploit.com/download Current source:...
Watchguard XCS FixCorruptMail Local Privilege Escalation
This module exploits a vulnerability in the Watchguard XCS 'FixCorruptMail' script called by root's crontab which can be exploited to run a command as root within 3 minutes. Module Options msf use exploit/freebsd/local/watchguard/fixcorruptmail msf undefinedfixcorruptmail show actions ...actions...
Dhclient Bash Environment Variable Injection Exploit
When bash is started with an environment variable that begins with the string " ", that variable is treated as a function definition and parsed as code. If extra commands are added after the function definition, they will be executed immediately. When dhclient receives an ACK that contains a doma...
Dhclient Bash Environment Variable Injection
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex/proto/dhcp' class Metasploit3 'Dhclient Bash Environment Variable Injection', 'Description' = %q| When bash is started with an environment...
Dhclient Bash Environment Variable Injection (Shellshock)
This module exploits the Shellshock vulnerability, a flaw in how the Bash shell handles external environment variables. This module targets dhclient by responding to DHCP requests with a malicious hostname, domainname, and URL which are then passed to the configuration scripts as environment...
Nagios XI < 2011R1.9 Multiple Vulnerabilities
Binary data 8363.prm...
Thibault Godouet FCron 1 Symbolic Link Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2835/info FCron is an implementation of the popular UNIX 'cron' utility that runs user-specified programs at periodic scheduled times. fcron is vulnerable to symbolic link attacks. It is possible for an attacker to...
Xcode OpenBase <= 9.1.5 (root file create) Local Root Exploit (OSX)
No description provided by source. !/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom http://docs.info.apple.com/article.html?artnum=61798 This won't help ftp://www.openbase.com/pub/OpenBase10.0 This will Create a new file anywhere on the filesystem with...
Vixie Cron crontab 3.0 Privilege Lowering Failure Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/2687/info Vixie cron is an implementation of the popular UNIX program that runs user-specified programs at periodic scheduled times. When a parsing error occurs after a modification operation, crontab will fail to drop...
OpenBSD 2.9/3.0 Default Crontab root Compromise Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4495/info OpenBSD ships with a number of cron jobs configured by default. The tasks are for the purpose of summarizing system information. The mail1 utility is used to send the summaries to the root user. This utility...
HP-UX 10.20/11.0 crontab /tmp File Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1845/info crontab is a binary in the cron package of the HP-UX cron implementation which allows a user to create a file of scheduled commands. A vulnerabiltiy in crontab exists that allows a user to read any file on an...
HP-UX 11.00/10.20 crontab Overwrite Files Exploit
No description provided by source. !/bin/sh HP-UX 11.00/10.20 crontab Kyong-won,Cho [email protected] Usage : ./crontab.sh distfile if -z $1 then echo Usage : $0 distfile exit fi cat EOF /tmp/crontabexp !/bin/sh ln -sf $1 $1 EOF chmod 755 /tmp/crontabexp EDITOR=/tmp/crontabexp export EDITOR...
Vixie Cron crontab 3.0 Privilege Lowering Failure Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/2687/info Vixie cron is an implementation of the popular UNIX program that runs user-specified programs at periodic scheduled times. When a parsing error occurs after a modification operation, crontab will fail to drop...
MacOSXLabs RsyncX 2.1 Insecure Temporary File Creation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11212/info RsyncX is reported to contain an insecure temporary file creation vulnerability. The result of this is that temporary files created by the application may use predictable filenames. A local attacker may exploit...
Adobe Version Cue 1.0/1.0.1 - Local Root Exploit (OSX)
No description provided by source. !/usr/bin/perl Adobe Version Cue VCNativeOSX: local root exploit. by: vade79/v9 [email protected] fakehalo/realhalo Adobe Version Cue's VCNative program writes data to a log file in the current working directory while running as setuid root. the logfile is formated...
Ruby on Rails exploit could hijack unpatched servers for botnet
Server Administrators are being urged to update their Ruby on Rails servers following the discovery of an active malware campaign targeting vulnerable versions of the web development framework. According to security researcher Jeff Jarmoc, Hackers are exploiting a known and patched vulnerability ...
Ruby on Rails exploit could hijack unpatched servers for botnet
Server Administrators are being urged to update their Ruby on Rails servers following the discovery of an active malware campaign targeting vulnerable versions of the web development framework. According to security researcher Jeff Jarmoc, Hackers are exploiting a known and patched vulnerability ...
CVE-2012-6097
File descriptor leak in cronie 1.4.8, when running in certain environments, might allow local users to read restricted files, as demonstrated by reading /etc/crontab...
PT-2013-1887
Name of the Vulnerable Software and Affected Versions cronie version 1.4.8 Description A file descriptor leak in cronie, when running in certain environments, might allow local users to read restricted files. This issue can be demonstrated by reading /etc/crontab. Recommendations For cronie versi...
vixie-cron security, bug fix, and enhancement update
4:4.1-81 - 455664 adoptions of crontab orphans, forgot add buffer for list of orphans - Related: rhbz455664 4:4.1-80 - 654961 crond process ignores the changes of user's home directory needs bigger changes of code. The fix wasn't applied, detail in comment11. - Related: rhbz249512 4:4.1-79 -...