Solaris 8 (x86) : 114670-04

SunOS 5.8x86: /usr/bin/rcp patch. Date this patch was last updated by Sun : Jul/09/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2007-3100: Undefined Security Weakness

usr/log.c in iscsid in open-iscsi iscsi-initiator-utils before 2.0-865 uses a semaphore with insecure permissions world-writable/world-readable for managing log messages using shared memory, which allows local users to cause a denial of service hang by grabbing the semaphore...

CVE-2007-3099: Undefined Security Weakness

usr/mgmtipc.c in iscsid in open-iscsi iscsi-initiator-utils before 2.0-865 checks the client's UID on the listening AFLOCAL socket instead of the new connection, which allows remote attackers to access the management interface and cause a denial of service iscsid exit or iSCSI connection loss...

CVE-2007-1369

inimodifier sgid-zendtech in Zend Platform 2.2.3 and earlier allows local users to modify the system php.ini file by editing a copy of php.ini file using the -f parameter, and then performing a symlink attack using the directory that contains the attacker-controlled php.ini file, and linking this...

Solaris 10 (sparc) : 124997-01 (deprecated)

SunOS 5.10: /usr/bin/tip patch. Date this patch was last updated by Sun : Jan/18/07 This plugin has been deprecated and either replaced with individual 124997 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

HP Tru64 Alpha OSF1 5.1 - ps Information Leak

HP Tru64 Alpha OSF1 5.1 - ps Information Leak !/bin/ksh osf1tru64ps.ksh exploit Tested on OSF1 V5.1 1885 alpha ps executable - information leak Author: Andrea "bunker" Purificato http://rawlab.mindcreations.com the "ps" command also /usr/ucb/ps on HP OSF1 v5.1 Alpha, developed without an eye to...

CVE-2007-0367: Undefined Security Weakness

Rumpus 5.1 and earlier has weak permissions for certain files and directories under /usr/local/Rumpus, including the configuration file, which allows local users to have an unknown impact by creating, modifying, or deleting files...

IRIX 5.3 /usr/sbin/iwsh Local Root Buffer Overflow

No description provided by source. / /usr/sbin/iwsh.c exploit by DCRH 27/5/97 Tested on: R3000 Indigo Irix 5.3 R4400 Indy Irix 5.3 Irix 5.x only compile as: cc iwsh.c / include stdio.h include stdlib.h include string.h include sys/types.h include unistd.h define NUMADDRESSES 500 define BUFLENGTH...

AIX 4.2 /usr/dt/bin/dtterm Local Buffer Overflow Exploit

No description provided by source. include stdio.h include stdlib.h include string.h char prog100="/usr/dt/bin/dtterm"; char prog230="dtterm"; extern int execv; char createvarchar name,char value char c; int l; l=strlenname+strlenvalue+4; if ! c=mallocl perror"error allocating";exit2;;...

expect (/usr/bin/expect) buffer overflow

No description provided by source. / hhp-expectsmash.c 12/11/00 expect /usr/bin/expect buffer overflow. Tested 5.31.8 and 5.28.1, slackware 7.x Maybe others. By: isox Site: www.hhp-programming.net Advisory: www.hhp-programming.net/ouradvisories/hhp-expectadv%2317.txt / include stdio.h include...

Mac OS X <= 10.4.7 Mach Exception Handling Local Root Exploit

Exploit for macOS platform in category local exploits ============================================================= Mac OS X include include include extern booleant excservermachmsgheadert , machmsgheade...

AIX 5.1 : IY27270

The remote host is missing AIX Critical Security Patch number IY27270 SECURITY: Buffer overflow in /usr/bin/cu. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

Solaris 8 / 9 (/usr/ucb/ps) Local Information Leak Exploit

Exploit for solaris platform in category local exploits ========================================================== Solaris 8 / 9 /usr/ucb/ps Local Information Leak Exploit ========================================================== !/bin/sh $Id: raptorucbps,v 1.1 2006/07/26 12:15:42 raptor Exp $...

Solaris 8 / 9 (/usr/ucb/ps) Local Information Leak Exploit

No description provided by source. !/bin/sh $Id: raptorucbps,v 1.1 2006/07/26 12:15:42 raptor Exp $ raptorucbps - information leak with Solaris /usr/ucb/ps Copyright c 2006 Marco Ivaldi [email protected] A security vulnerability in the "/usr/ucb/ps" see ps1B command may allow unprivileged...

Solaris 8/9 - '/usr/ucb/ps' Local Information Leak

!/bin/sh $Id: raptorucbps,v 1.1 2006/07/26 12:15:42 raptor Exp $ raptorucbps - information leak with Solaris /usr/ucb/ps Copyright c 2006 Marco Ivaldi A security vulnerability in the "/usr/ucb/ps" see ps1B command may allow unprivileged local users the ability to see environment variables and the...

CVE-2006-4063: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Csaba Godor SAPID Blog Beta 2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 rootpath parameter to a usr/extensions/getbloginfochannel.inc.php, b usr/extensions/getblogmetainfo.inc.php, or c...

CVE-2006-4026: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in SAPID CMS 123 rc3 allows remote attackers to execute arbitrary PHP code via a URL in the 1 rootpath parameter in usr/extensions/getinfochannel.inc.php and the 2 GLOBALS"rootpath" parameter in usr/extensions/gettree.inc.php...

CVE-1999-1587: Undefined Security Weakness

/usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environment variables and values of arbitrary processes via the -e option...

Buffer overflow

Multiple buffer overflows in Cray UNICOS 9.0.2.2 might allow local users to gain privileges by 1 invoking /usr/bin/script with a long command line argument or 2 setting the -c option of /etc/nu to the name of a file containing a long line...

CVE-2006-0177

Multiple buffer overflows in Cray UNICOS 9.0.2.2 might allow local users to gain privileges by 1 invoking /usr/bin/script with a long command line argument or 2 setting the -c option of /etc/nu to the name of a file containing a long line...