512 matches found
SuSE 11 Security Update : cron (SAT Patch Number 2027)
This update of cron fixes a race condition in crontab that can be used to change the time-stamp of arbitrary files while editing the crontab entry. Additionally the return value of initgroups is verified now. CVE-2010-0424: CVSS v2 Base Score: 3.6 %NASLMINLEVEL 70300 C Tenable Network Security,...
CVE-2010-0424
CVE-2010-0424 affects cronie (before 1.4.4) and the Vixie cron (vixie-cron). The vulnerability resides in the edit_cmd function in crontab.c, which allows local users to change the modification times of arbitrary files via a symlink attack on a temporary file in /tmp, potentially leading to a den...
Mandriva Update for vixie-cron MDKSA-2007:234 (vixie-cron)
Check for the Version of vixie-cron OpenVAS Vulnerability Test Mandriva Update for vixie-cron MDKSA-2007:234 vixie-cron Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...
Authorization
crontab in bos.rte.cron in IBM AIX 6.1.0 through 6.1.2 allows local users with aix.system.config.cron authorization to gain privileges by launching an editor...
CVE-2008-5384
crontab in bos.rte.cron in IBM AIX 6.1.0 through 6.1.2 allows local users with aix.system.config.cron authorization to gain privileges by launching an editor...
CVE-2008-5384: Undefined Security Weakness
crontab in bos.rte.cron in IBM AIX 6.1.0 through 6.1.2 allows local users with aix.system.config.cron authorization to gain privileges by launching an editor...
CVE-2008-5384
crontab in bos.rte.cron in IBM AIX 6.1.0 through 6.1.2 allows local users with aix.system.config.cron authorization to gain privileges by launching an editor...
CVE-2008-5384
CVE-2008-5384 affects IBM AIX 6.1.0–6.1.2, specifically the crontab component in bos.rte.cron. The underlying issue allows local users with aix.system.config.cron authorization to escalate privileges by launching an editor. Publicly available technical context in connected sources confirms affect...
IBM AIX多个本地溢出及权限提升漏洞
BUGTRAQ ID: 32493 IBM AIX是一款商业性质的UNIX操作系统。 IBM AIX中的多个安全漏洞可能允许本地攻击者触发缓冲区溢出，以提升的权限执行任意操作。 1 /usr/sbin/ndp setuid root程序中存在缓冲区溢出。成功利用这个漏洞要求在运行netcd守护程序。 2 特权的/usr/sbin/autoconf6命令中存在缓冲区溢出。成功利用这个漏洞要求在使用RBAC且攻击者拥有aix.network.config.tcpip授权。 3 如果/etc/qconfig定义漏洞打印队列的话，特权/usr/bin/enq命令中的错误可能导致删除任意文件。 4...
Design/Logic Flaw
Unspecified vulnerability in crontab on Sun Solaris 8 through 10, and OpenSolaris before snv93, allows local users to insert cron jobs into the crontab files of arbitrary users via unspecified vectors...
CVE-2008-2538
Unspecified vulnerability in crontab on Sun Solaris 8 through 10, and OpenSolaris before snv93, allows local users to insert cron jobs into the crontab files of arbitrary users via unspecified vectors...
CVE-2008-2538
Unspecified vulnerability in crontab on Sun Solaris 8 through 10, and OpenSolaris before snv93, allows local users to insert cron jobs into the crontab files of arbitrary users via unspecified vectors...
CVE-2008-2538
CVE-2008-2538 affects Sun Solaris 8–10 and OpenSolaris before snv_93. The vulnerability allows a local user to insert cron jobs into arbitrary users’ crontab files via unspecified vectors, due to an unspecified flaw in crontab handling. Impact is local privilege escalation (crontab modification f...
CVE-2008-2538: Concurrent Execution using Shared Resource with Improper Synchronization
Unspecified vulnerability in crontab on Sun Solaris 8 through 10, and OpenSolaris before snv93, allows local users to insert cron jobs into the crontab files of arbitrary users via unspecified vectors...
Analysis of Linux Backdoor techniques and practices-the vulnerability of early warning-the black bar safety net
| | Page 1 of: analysis of the Linux Backdoor technique and practice methods --- | --- The back door introduction The intruder complete control of the system, to facilitate the next time you enter and use a technology. Generally by modifying system configuration files and installation of...
SuSE 10 Security Update : cron (ZYPP Patch Number 3831)
By setting hard links to /etc/crontab users were able to prevent cron from running scheduled jobs. CVE-2007-1856 A re-emerged symlink bug allowed users to edit the crontab of other users. CVE-2005-1038 This is a reissue of the SLES10 update after Service Pack 1, since Service Pack 1 merge lost so...
SuSE 10 Security Update : cron (ZYPP Patch Number 3093)
By setting hard links to /etc/crontab users were able to prevent cron from running scheduled jobs. CVE-2007-1856 A re-emerged symlink bug allowed users to edit the crontab of other users. CVE-2005-1038 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...
Mandrake Linux Security Advisory : vixie-cron (MDKSA-2007:234)
Raphael Marichez discovered a denial of service bug in how vixie-cron verifies crontab file integrity. A local user with the ability to create a hardlink to /etc/crontab could prevent vixie-cron from executing certain system cron jobs. The updated packages have been patched to correct this issue...