ipfilter.3.2.10.txt

Date: Thu, 15 Apr 1999 17:56:02 +0000 From: 0x1c To: [email protected] Subject: FSA-99.04-IPFILTER-v3.2.10 The author Darren Reed was notified about this problem early April. I believe it has been fixed in the latest version. FERALMONKEY SECURITY ADVISORY - IPFILTER v3.2.10 Title:...

suse.6.1.tmp.symlinks.txt

Date: Wed, 2 Jun 1999 11:01:32 +0200 From: Thomas Fischbacher To: [email protected] Subject: /tmp symlink problems in SuSE Linux 6.1 I notified SuSE GmbH several weeks ago about this problem, but didn't get any response, therefore this post to Bugtraq. With SuSE Linux 6.1 there are still a few...

kde.kmail.tmp.dir.txt

Date: Wed, 9 Jun 1999 14:52:49 -0700 From: [email protected] Reply-To: X-Force To: [email protected] Subject: ISSalert: ISS Security Advisory: KDE K-Mail File Creation Vulnerability TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact...

Oracle 8 8.1.5 - Intelligent Agent (2)

// source: https://www.securityfocus.com/bid/585/info A vulnerability in the Oracle Intelligent Agent allows local malicious users to execute arbitrary commands and to create world writable files as the root user. The problem lies in the dbsnmp program located in $ORACLEHOME/bin . This setuid roo...

BMC Software Patrol 3.2.5 - Patrol SNMP Agent File Creation/Permission

source: https://www.securityfocus.com/bid/525/info Patrol 3.2, installed out of the box, allows for a local root compromise or denial of service. The vulnerability lies in the creation of a file by snmpagnt that is owned by the owner of the parent directory of the file and possibly world writeabl...

BMC Software Patrol 3.2.5 - Patrol SNMP Agent File CreationPermission

BMC Software Patrol 3.2.5 - Patrol SNMP Agent File CreationPermission source: https://www.securityfocus.com/bid/525/info Patrol 3.2, installed out of the box, allows for a local root compromise or denial of service. The vulnerability lies in the creation of a file by snmpagnt that is owned by the...

Caldera kdenetwork 1.1.1-1 Caldera OpenLinux 1.32.2 KDE KDE 1.11.1. RedHat Linux 6.0 - K-Mail File Creation

Caldera kdenetwork 1.1.1-1 Caldera OpenLinux 1.32.2 KDE KDE 1.11.1. RedHat Linux 6.0 - K-Mail File Creation // source: https://www.securityfocus.com/bid/300/info KMail is a mail user agent that comes with the kdenetwork package, part of the K Desktop Environment. A vulnerability in the way KMail...

G. Wilford man 2.3.10 - Symlink

G. Wilford man 2.3.10 - Symlink source: https://www.securityfocus.com/bid/305/info The man command created a temporary file under /tmp with a predictable name and is willing to follow symbolic links. This may allow malicious local users to create arbitrarily named files. zsoelim1 is a utility par...

G. Wilford man 2.3.10 - Symlink

source: https://www.securityfocus.com/bid/305/info The man command created a temporary file under /tmp with a predictable name and is willing to follow symbolic links. This may allow malicious local users to create arbitrarily named files. zsoelim1 is a utility part of the man package which...

Oracle 8 - File Access

source: https://www.securityfocus.com/bid/170/info A number of security file access security vulnerabilities in suid programs that are part of Oracle may be exploited to obtain the privileges of the 'oracle' user and full access to the database system. Only the Unix version of Oracle is vulnerabl...

[SECURITY] New versions of procps fixes security problem

We have received a report about procps 1.2.6 containing a file creation and corruption bug in XConsole. If you have procps installed on your machines we suggest that you upgrade immetiately. The problem is fixed in any 1.2.7 version of procps. dpkg -i file.deb will install the referred file. Debi...

[SECURITY] New versions of procps fixes security problem

We have received a report about procps 1.2.6 containing a file creation and corruption bug in XConsole. If you have procps installed on your machines we suggest that you upgrade immetiately. The problem is fixed in any 1.2.7 version of procps. dpkg -i file.deb will install the referred file. Debi...

Slackware Linux 3.4 - liloconfig-color Temporary File

Slackware Linux 3.4 - liloconfig-color Temporary File source: https://www.securityfocus.com/bid/77/info liloconfig-color creates the file /tmp/reply insecurely and follows symbolic links. An attacker can create a symbolic link from /tmp/reply to any file and wait for root to run the program. This...

IBM AIX 4.2.1 - usrbinportmir Local Buffer Overflow Insecure Temporary File Creation

IBM AIX 4.2.1 - usrbinportmir Local Buffer Overflow Insecure Temporary File Creation / source: https://www.securityfocus.com/bid/385/info AIX version 4.2.1 introduced a new command titled 'portmir'. This new program had two notable vulnerabilites. First it contained a buffer overflow which allowe...

IBM AIX 4.2.1 - '/usr/bin/portmir' Local Buffer Overflow / Insecure Temporary File Creation

/ source: https://www.securityfocus.com/bid/385/info AIX version 4.2.1 introduced a new command titled 'portmir'. This new program had two notable vulnerabilites. First it contained a buffer overflow which allowed malicious users to obtain root privileges. Secondly it wrote it's log files to a...

PT-1997-1033 · Bsd · Lpd

Name of the Vulnerable Software and Affected Versions: lpd affected versions not specified Description: The issue concerns file creation and deletion, as well as remote execution, in the BSD line printer daemon lpd. Recommendations: At the moment, there is no information about a newer version tha...

AIX 3.x - bugfiler Arbitrary File Creation

AIX 3.x - bugfiler Arbitrary File Creation source: https://www.securityfocus.com/bid/1800/info A vulnerability exists in AIX 3. versions of bugfiler, a utility which automates the process of reporting an filing system bugs. Bugfiler, installed setuid root, creates files in a directory specified b...

AIX 3.x - bugfiler Arbitrary File Creation

source: https://www.securityfocus.com/bid/1800/info A vulnerability exists in AIX 3. versions of bugfiler, a utility which automates the process of reporting an filing system bugs. Bugfiler, installed setuid root, creates files in a directory specified by the user invoking the program example:...

Microsoft IIS 3.0 - 'newdsn.exe' File Creation

source: https://www.securityfocus.com/bid/1818/info Microsoft IIS 3.0 came with a sample program, newdsn.exe, installed by default in the directory wwwroot/scripts/tools/. Execution of this program with a properly submitted URL could allow for remote file creation. The file created is a Microsoft...

Microsoft IIS 3.0 - newdsn.exe File Creation

Microsoft IIS 3.0 - newdsn.exe File Creation source: https://www.securityfocus.com/bid/1818/info Microsoft IIS 3.0 came with a sample program, newdsn.exe, installed by default in the directory wwwroot/scripts/tools/. Execution of this program with a properly submitted URL could allow for remote...