Lucene search
+L

729 matches found

Exploit DB
Exploit DB
•added 2009/12/31 12:00 a.m.•35 views

linux/x86 append "/etc/passwd" & exit 107 bytes

linux/x86 append "/etc/passwd" & exit 107 bytes. Shellcode exploit for linx86 platform / appendpasswd.c Payload: Adds the string: toor::0:0:t00r:/root:/bin/bash to /etc/passwd thereby adding a password-less root account with login name "toor" Platform: linux/x86 Size: 107 bytes Author: $andman / ...

SaveExploits0
seebug.org
seebug.org
•added 2009/12/31 12:00 a.m.•24 views

linux/x86 append ""/etc/passwd"" & exit() 107 bytes

No description provided by source. / appendpasswd.c Payload: Adds the string: toor::0:0:t00r:/root:/bin/bash to /etc/passwd thereby adding a password-less root account with login name "toor" Platform: linux/x86 Size: 107 bytes Author: $andman / / 08049054 start: 8049054: eb 38 jmp 804908e callfun...

7.1AI score
SaveExploits0
OSV
OSV
•added 2009/12/03 7:30 p.m.•5 views

DEBIAN-CVE-2009-4193

Merkaartor 0.14 allows local users to append data to arbitrary files via a symlink attack on the /tmp/merkaartor.log temporary file...

3.3CVSS6.7AI score0.00322EPSS
SaveExploits0References1
Prion
Prion
•added 2009/12/03 7:30 p.m.•10 views

Design/Logic Flaw

Merkaartor 0.14 allows local users to append data to arbitrary files via a symlink attack on the /tmp/merkaartor.log temporary file...

3.3CVSS6.7AI score0.00322EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
•added 2009/12/03 7:00 p.m.•36 views

CVE-2009-4193

Merkaartor 0.14 allows local users to append data to arbitrary files via a symlink attack on the /tmp/merkaartor.log temporary file...

6AI score0.00322EPSS
SaveExploits0References8
Oracle linux
Oracle linux
•added 2009/11/04 12:00 a.m.•105 views

kernel security and bug fix update

2.4.21-63.0.0.0.1.EL - add directio support for qla drivers herb ora 6346849 - support PT Quad card ora 5751043 - io to nfs partition hangs ora 5088963 - add entropy for bnx2 nic ora 5931647 - avoid large allocation-fragmentation in MTU zab - fix clear highpage wli 2.4.21-63.EL - fs: fix pipe nul...

7.8CVSS1.4AI score0.33727EPSS
SaveExploits28
Prion
Prion
•added 2009/09/08 10:30 a.m.•22 views

Buffer overflow

Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long first argument to the APPEND command, a different vector than CVE-2008-1497 a...

4CVSS7.8AI score0.24277EPSS
SaveExploits4References4Affected Software1
Cvelist
Cvelist
•added 2009/09/08 10:00 a.m.•34 views

CVE-2008-7182

Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long first argument to the APPEND command, a different vector than CVE-2008-1497 a...

7.3AI score0.24277EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/09/08 12:00 a.m.•4 views

CVE-2008-7182: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long first argument to the APPEND command, a different vector than CVE-2008-1497 a...

4CVSS6.4AI score0.24277EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2009/04/23 12:00 a.m.•58 views

Mandriva Linux Security Advisory : kernel (MDVSA-2008:224-1)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The error-reporting functionality in 1 fs/ext2/dir.c, 2 fs/ext3/dir.c, and possibly 3 fs/ext4/dir.c in the Linux kernel 2.6.26.5 does not limit the number of printk console messages that report directory corruption, whic...

4.7CVSS5.5AI score0.00525EPSS
SaveExploits3References9
OpenVAS
OpenVAS
•added 2009/03/23 12:00 a.m.•36 views

Ubuntu: Security Advisory (USN-636-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.2CVSS6.6AI score0.00993EPSS
SaveExploits6References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/01/30 12:00 a.m.•2 views

CVE-2009-0370: Undefined Security Weakness

Multiple unspecified vulnerabilities in IBM AIX 5.2.0 through 6.1.2 allow local users to append data to arbitrary files, related to 1 rmsock and 2 rmsock64 not creating "secure log files."...

7.2CVSS6AI score0.00367EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2009/01/22 10:39 a.m.•14 views

kernel: don't allow splice() to files opened with O_APPEND

The dosplicefrom function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the OAPPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file...

4.6CVSS5.9AI score0.00392EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2008/12/16 7:30 a.m.•17 views

kernel: don't allow splice() to files opened with O_APPEND

The dosplicefrom function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the OAPPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file...

4.6CVSS5.9AI score0.00392EPSS
SaveExploits1References4
Exploit DB
Exploit DB
•added 2008/11/23 12:00 a.m.•41 views

linux/x86 - append rsa key to /root/.ssh/authorized_keys2 295 bytes

linux/x86 append rsa key to /root/.ssh/authorizedkeys2 295 bytes. Shellcode exploit for linx86 platform / linux/x86 shellcode to append rsa key to /root/.ssh/authorizedkeys2 keys found at http://xenomuta.tuxfamily.org/exploits/authkey/ ssh -i idrsapwn root@pwned-host 295 bytes by XenoMuta | |/ / ...

7.3AI score
SaveExploits0
seebug.org
seebug.org
•added 2008/11/23 12:00 a.m.•24 views

linux/x86 append rsa key to /root/.ssh/authorized_keys2 295 bytes

No description provided by source. / linux/x86 shellcode to append rsa key to /root/.ssh/authorizedkeys2 keys found at http://xenomuta.tuxfamily.org/exploits/authkey/ ssh -i idrsapwn root@pwned-host 295 bytes by XenoMuta | |/ / / |/ / / / | / / / / /|/ / / / / / / / / / / / / // / / / / // / //...

7.1AI score
SaveExploits0
zdt
zdt
•added 2008/11/23 12:00 a.m.•30 views

linux/x86 append rsa key to /root/.ssh/authorized_keys2 295 bytes

Exploit for linux/x86 platform in category shellcode ================================================================= linux/x86 append rsa key to /root/.ssh/authorizedkeys2 295 bytes ================================================================= / linux/x86 shellcode to append rsa key to...

7AI score
SaveExploits0
Cvelist
Cvelist
•added 2008/11/18 3:00 p.m.•30 views

CVE-2008-5155

mail2sms.sh in smsclient 2.0.8z allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/header. or 2 /tmp/body. temporary file, or append data to arbitrary files via a symlink attack on the 3 /tmp/sms.log temporary file...

6.3AI score0.01304EPSS
SaveExploits1References3
NVD
NVD
•added 2008/10/15 8:07 p.m.•24 views

CVE-2008-4554

The dosplicefrom function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the OAPPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file...

4.6CVSS5.9AI score0.00392EPSS
SaveExploits1References24
Prion
Prion
•added 2008/10/15 8:07 p.m.•32 views

Remote file inclusion

The dosplicefrom function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the OAPPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file...

4.6CVSS6.1AI score0.00392EPSS
SaveExploits1References24Affected Software1
Rows per page
Query Builder