Solaris Update manager and Sun Patch Cluster symlink vulnerability

Exploit for solaris platform in category local exploits ================================================================== Solaris Update manager and Sun Patch Cluster symlink vulnerability ================================================================== Symlink attack with Solaris Update manag...

Solaris Update Manager / Sun Patch Cluster Symlink Attack

Symlink attack with Solaris Update manager and Sun Patch Cluster Larry W. Cashdollar Vapid Labs http://vapid.dhs.org 1/24/2010 With the GUI Sun Update Manager being used to install patches on a system local users can easily run scripts and create symlinks in an attempt to clobber files and...

Sun Connection Update Manager for Solaris - Multiple Insecure Temporary File Creation Vulnerabilities

Sun Connection Update Manager for Solaris - Multiple Insecure Temporary File Creation Vulnerabilities source: https://www.securityfocus.com/bid/38928/info Sun Connection Update Manager for Solaris creates temporary files in an insecure manner. An attacker with local access could potentially explo...

Sun Connection Update Manager for Solaris - Multiple Insecure Temporary File Creation Vulnerabilities

source: https://www.securityfocus.com/bid/38928/info Sun Connection Update Manager for Solaris creates temporary files in an insecure manner. An attacker with local access could potentially exploit these issues to perform symbolic-link attacks, overwriting arbitrary files in the context of the...

CVE-2010-0791

The 1 ncpmount, 2 ncpumount, and 3 ncplogin programs in ncpfs 2.2.6 do not properly create lock files, which allows local users to cause a denial of service application failure via unspecified vectors that trigger the creation of a /etc/mtab file that persists after the program exits...

CVE-2010-0933

The vulnerability CVE-2010-0933 affects Perforce Server 2008.1 and is a directory traversal flaw that allows remote authenticated users to create arbitrary files by supplying a .. (dot dot) sequence in the argument to the p4 add command. Core details consistently reported across sources (NVD, Red...

CVE-2010-0933: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Perforce Server 2008.1 allows remote authenticated users to create arbitrary files via a .. dot dot in the argument to the "p4 add" command...

PHP < 5.2.13 Multiple Vulnerabilities

PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...

tomcat: unexpected file deletion and/or alteration

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry...

Interspire Knowledge Manager 5 - callback.snipshot.php Arbitrary File Creation

Interspire Knowledge Manager 5 - callback.snipshot.php Arbitrary File Creation source: https://www.securityfocus.com/bid/38186/info Interspire Knowledge Manager is prone to a vulnerability that allows attackers to create arbitrary files on a vulnerable computer. An attacker may exploit this issue...

Interspire Knowledge Manager 5 - 'callback.snipshot.php' Arbitrary File Creation

source: https://www.securityfocus.com/bid/38186/info Interspire Knowledge Manager is prone to a vulnerability that allows attackers to create arbitrary files on a vulnerable computer. An attacker may exploit this issue to create arbitrary files, which may then be executed to perform unauthorized...

CVE-2009-2693: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry...

Winamp 5.572 Exploit - SEH

Exploit for unknown platform in category local exploits ========================== Winamp 5.572 Exploit - SEH ========================== !/usr/bin/python Exploit Title: Winamp email protected:/exploits/winamp$ nc -v 192.168.2.24 4444 192.168.2.24: inverse host lookup failed: Unknown server error ...

DJ Studio Pro 5.1.6.5.2 Stack Overflow

!/usr/bin/perl Usage--file created--load file--b00m.pls BOOM print "\n"; print "! DJ Studio Pro 5.1.6.5.2 .pls Local Stack Overflow Exploit\n"; print "\n"; print "! Author: cr4wl3r\n"; print "! Mail: cr4wl3r!linuxmail.org\n"; print "\n"; my $boom = "A" x 1500; my $filename = "b00m.pls"; open...

yPlay 1.0.76 Proof Of Concept

!/usr/bin/perl Usage--file created--load file--b00m.mp3 BOOM print "\n"; print "! yPlay 1.0.76 .mp3 Local Crash PoC\n"; print "\n"; print "! Author: cr4wl3r\n"; print "! Mail: cr4wl3r!linuxmail.org\n"; print "\n"; my $boom = "A" x 1337; my $filename = "b00m.mp3"; open FILE,"$filename"; print FILE...

yPlay 1.0.76 - .mp3 Local Crash (PoC)

yPlay 1.0.76 - .mp3 Local Crash PoC !/usr/bin/perl Usage--file created--load file--b00m.mp3 BOOM print "\n"; print "! yPlay 1.0.76 .mp3 Local Crash PoC\n"; print "\n"; print "! Author: cr4wl3r\n"; print "! Mail: cr4wl3r!linuxmail.org\n"; print "\n"; my $boom = "A" x 1337; my $filename = "b00m.mp3...

Mandriva Update for bash MDVSA-2010:004 (bash)

Check for the Version of bash OpenVAS Vulnerability Test Mandriva Update for bash MDVSA-2010:004 bash Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

phpMyAdmin <2.11.10 创建不安全文件和目录漏洞

No description provided by source...

OtsTurntables Free 1.00.047 - Overwrite (SEH) (PoC)

OtsTurntables Free 1.00.047 - Overwrite SEH PoC Exploit Title: OtsTurntables Free v1.00.047 SEH Overwrite POC Date: 14-01-2010 Author: Darkb0x Software Link: http://www.otsturntables.com/download-otsturntables-free/ Version: 1.00.047 Tested on: Windows Vista Ultimate English exploit code print...

OtsTurntables Free v1.00.047 SEH Overwrite POC

Exploit for unknown platform in category dos / poc ============================================== OtsTurntables Free v1.00.047 SEH Overwrite POC ============================================== Exploit Title: OtsTurntables Free v1.00.047 SEH Overwrite POC Date: 14-01-2010 Author: Darkb0x Software...