Дырка в Lotus Web Server

Исопльзуя URL типа http://TARGETDOMINO/.nsf/../winnt/win.ini можно получить доступ к любому файлу на диске...

CVE-2000-0459

IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of service by filling up the disk space by requesting a large number of documents and prematurely stopping the request...

CVE-2000-0459: Undefined Security Weakness

IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of service by filling up the disk space by requesting a large number of documents and prematurely stopping the request...

CVE-2000-0030

Solaris dmispd dmicmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database...

CVE-2000-0030

CVE-2000-0030 affects Solaris dmispd dmi_cmd, allowing a local user to exhaust restricted disk space by adding files to /var/dmi/db. The NVD entry lists a MEDIUM base score (5.0) with availability impact and no confidentiality/integrity impact, and indicates a local-access condition despite the C...

CVE-2000-0030: Undefined Security Weakness

Solaris dmispd dmicmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database...

Проблема в SSH с Kerberos

При использовании Kerberos-авторизации ticket ползователя хранится в файле "none" текущей директории а не в /tmp. В том случае, когда текущий каталог находится на сетевом дисек, есть вероятность его перехвата при передаче и ксопрометации учетной записи пользователя...

Infosec.20000617.panda.a

Infosec Security Vulnerability Report No: Infosec.20000617.panda.a ============================ Vulnerability Summary --------------------- Problem: Panda Antivirus has an open console at port 2001 Threat: Remotely run any command on a Netware console Platform: Confirmed on Novell Netware Solutio...

Локальный DoS против FreeBSD

Команда dd if=disc image of=/dev/fd0 приводит к перезагрузке системы, если дискета защищена на запись...

Дырка в Secret Disk

На машинах с несколькими мониторами скринсейвер с паролем, запускающийся при изъятии ключа, запускается только на одном мониторе...

Дырка в kcsd под Linux

kcsd использует внешний shell определяемый переменной SHELL, которая задается пользователем. Таким образом, подменив SHELL можно получить привелегии группы disk, позволяющие менять разрешения любых файлов...

KDE 1.11.1.11.22.0 kscd - SHELL Environmental Variable

KDE 1.11.1.11.22.0 kscd - SHELL Environmental Variable source: https://www.securityfocus.com/bid/1206/info Some linux distributions S.u.S.E. 6.4 reported ship with kscd a CD player for the KDE Desktop sgid disk. kscd uses the contents of the 'SHELL' environment variable to execute a browser. This...

CVE-2000-0112

Technical details for CVE-2000-0112 are not publicly available in the provided documents. The description notes an insecure Debian MBR issue, but no confirmable affected products, versions, impact, or mitigations are present here. Monitor for updates.

CVE-2000-0112

The default installation of Debian GNU/Linux uses an insecure Master Boot Record MBR which allows a local user to boot from a floppy disk during the installation...

CVE-1999-0594

A Windows NT system does not restrict access to removable media drives such as a floppy disk drive or CDROM drive...

CVE-1999-0594: Undefined Security Weakness

A Windows NT system does not restrict access to removable media drives such as a floppy disk drive or CDROM drive...

CVE-2000-0112

The default installation of Debian GNU/Linux uses an insecure Master Boot Record MBR which allows a local user to boot from a floppy disk during the installation...

CVE-2000-0030

Solaris dmispd dmicmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database...

Solaris 7.0 - DMI Denial of Service

source: https://www.securityfocus.com/bid/878/info DMI is the Desktop Management Interface, and is a suite of application management programs shipped with Sun's Solaris. Each application that is managed through DMI has a MIF record which contains information about its managable components and...

cdda2cdr_bof.txt

Greetings, There is a buffer overflow vulnerability in cdda2cdr distributed with at least package cdwtools-0.93-78. This program is sgid disk by default and thus any malicious user who gains disk privs will have r/w access to your entire hard drives in the form of /dev/hd. This is obviously a qui...