3453 matches found
PGP 5.x6.x7.0 - ASCII Armor Parser Arbitrary File Creation
PGP 5.x6.x7.0 - ASCII Armor Parser Arbitrary File Creation source: https://www.securityfocus.com/bid/2556/info ASCII Armor is a text based encoding format used by PGP Pretty Good Privacy. While it is possible to encode any file using ASCII Armor, it is used by PGP to encode signature files and...
[ Hackerslab bug_paper ] SunOS application perfmon vulnerability
============================================================================== Hackerslab bugpaper SunOS application perfmon vulnerability ============================================================================== File : /opt/JSParm/bin/perfmon SYSTEM : Solaris 2.X INFO : parm is a program th...
[SECURITY] [DSA-016-1] New version of wu-ftpd released
---------------------------------------------------------------------------- Debian Security Advisory DSA-016-1 [email protected] http://www.debian.org/security/ Martin Schulze January 23, 2001 - ---------------------------------------------------------------------------- Package : wu-ftpd...
CVE-2000-0679
The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files...
SuSE 6.x7.0 - MkDir Error Handling rctab Race Condition (1)
SuSE 6.x7.0 - MkDir Error Handling rctab Race Condition 1 source: https://www.securityfocus.com/bid/2207/info rctab is the Run Control Tab script included with the SuSE distribution of the Linux Operating System. SuSE is a freely available, Open Source Operating system maintained by SuSE...
SuSE 6.x/7.0 - MkDir Error Handling rctab Race Condition (2)
source: https://www.securityfocus.com/bid/2207/info rctab is the Run Control Tab script included with the SuSE distribution of the Linux Operating System. SuSE is a freely available, Open Source Operating system maintained by SuSE Incorporated. A race condition in the rctab script could allow an...
SuSE 6.x/7.0 - MkDir Error Handling rctab Race Condition (1)
source: https://www.securityfocus.com/bid/2207/info rctab is the Run Control Tab script included with the SuSE distribution of the Linux Operating System. SuSE is a freely available, Open Source Operating system maintained by SuSE Incorporated. A race condition in the rctab script could allow an...
Metertek pagelog.cgi Traversal Arbitrary File Access
The 'pagelog.cgi' cgi is installed. This CGI has a well known security flaw that lets an attacker create arbitrary files on the remote server, ending in .txt, and reading arbitrary files ending in .txt or .log Warning : this flaw was not tested by Nessus. Check the existence of...
Дырка в audlinks
Проблема символьных линков при создании лок-файла...
Дырка в ksh
Проблема при создании временных файлов при перенаправлении ввода аналогична sh, tcsh bash и др...
Cenroll ActiveX Control allows creation of arbitrary files.
Overview The ActiveX control Cenroll permits unauthorized users to create files on the local system. Description The ActiveX control "Cenroll" clsid: 43F8F289-7A20-11D0-8F06-00C04FC295E1, which is ordinarily marked safe-for-scripting allows callers to create files and write to the registry with t...
BFTPd 1.0.12 - Remote Overflow
BFTPd 1.0.12 - Remote Overflow / Creates a filname to exploit the bug in bftpd 1.0.12 Create the file, cwd in the shell directory and nlist the file directory. Coded by korty / include include include include define LEN 205 int main int argc, char argv char bufLEN + 12; int ret = 0xbffffa80; int ...
UUCP - File CreationOverwriting Symlinks
UUCP - File CreationOverwriting Symlinks / root exploit: multiple subsystem errors allowing root exploit bashack.c - Thu Nov 30 21:50:50 NZDT 2000 redhat 6.1 /etc/rc.d/ and scripts that are trusting the untrustworthy. /bin/sh acts silly when u get it to use the include define FNAME...
UUCP Exploit - file creation/overwriting (symlinks)
Exploit for linux platform in category local exploits =================================================== UUCP Exploit - file creation/overwriting symlinks =================================================== / root exploit: multiple subsystem errors allowing root exploit bashack.c - Thu Nov 30...
UUCP - File Creation/Overwriting Symlinks
/ root exploit: multiple subsystem errors allowing root exploit bashack.c - Thu Nov 30 21:50:50 NZDT 2000 redhat 6.1 /etc/rc.d/ and scripts that are trusting the untrustworthy. /bin/sh acts silly when u get it to use the include define FNAME "/usr/man/man1/last.1.gz;export PATH=.;cd ..;cd ..;cd...
[ADV/EXP]: RH6.x root from bash /tmp vuln + MORE
Advisory: its been fixed, check some previous messages. bash1 /tmp vulns Also: uucp exploit - file creation/overwriting symlinks kinda exploit for man/makewhatis Requires: 1 local access to run the program 2 a crash or reboot to happened 3 /etc/cron.weekly/makewhatis.cron to be executed by cron 4...
Minor bug in Pagelog.cgi
There is a small bug in PAGELOG.cgi by Metertek [email protected] which allows users to create and view files. Any file on the system with a '.log' extension readable by the uid/gid of the webserver can be viewed. In addition, two files with extensions of '.txt' and '.log' can be created in any...
CVE-2000-0679
The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files...
CVE-2000-0318
CVE-2000-0318 affects Atrium Mercur Mail Server 3.2 via a local directory traversal vulnerability (dot-dot). The vulnerability allows a local attacker to read other users’ email and to create arbitrary files by exploiting a path traversal issue. The available documents do not provide explicit exp...