Дырка в ksh

Проблема при создании временных файлов при перенаправлении ввода аналогична sh, tcsh bash и др...

Cenroll ActiveX Control allows creation of arbitrary files.

Overview The ActiveX control Cenroll permits unauthorized users to create files on the local system. Description The ActiveX control "Cenroll" clsid: 43F8F289-7A20-11D0-8F06-00C04FC295E1, which is ordinarily marked safe-for-scripting allows callers to create files and write to the registry with t...

BFTPd 1.0.12 - Remote Overflow

BFTPd 1.0.12 - Remote Overflow / Creates a filname to exploit the bug in bftpd 1.0.12 Create the file, cwd in the shell directory and nlist the file directory. Coded by korty / include include include include define LEN 205 int main int argc, char argv char bufLEN + 12; int ret = 0xbffffa80; int ...

UUCP Exploit - file creation/overwriting (symlinks)

Exploit for linux platform in category local exploits =================================================== UUCP Exploit - file creation/overwriting symlinks =================================================== / root exploit: multiple subsystem errors allowing root exploit bashack.c - Thu Nov 30...

UUCP - File CreationOverwriting Symlinks

UUCP - File CreationOverwriting Symlinks / root exploit: multiple subsystem errors allowing root exploit bashack.c - Thu Nov 30 21:50:50 NZDT 2000 redhat 6.1 /etc/rc.d/ and scripts that are trusting the untrustworthy. /bin/sh acts silly when u get it to use the include define FNAME...

UUCP - File Creation/Overwriting Symlinks

/ root exploit: multiple subsystem errors allowing root exploit bashack.c - Thu Nov 30 21:50:50 NZDT 2000 redhat 6.1 /etc/rc.d/ and scripts that are trusting the untrustworthy. /bin/sh acts silly when u get it to use the include define FNAME "/usr/man/man1/last.1.gz;export PATH=.;cd ..;cd ..;cd...

[ADV/EXP]: RH6.x root from bash /tmp vuln + MORE

Advisory: its been fixed, check some previous messages. bash1 /tmp vulns Also: uucp exploit - file creation/overwriting symlinks kinda exploit for man/makewhatis Requires: 1 local access to run the program 2 a crash or reboot to happened 3 /etc/cron.weekly/makewhatis.cron to be executed by cron 4...

Minor bug in Pagelog.cgi

There is a small bug in PAGELOG.cgi by Metertek [email protected] which allows users to create and view files. Any file on the system with a '.log' extension readable by the uid/gid of the webserver can be viewed. In addition, two files with extensions of '.txt' and '.log' can be created in any...

CVE-2000-0679

The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files...

CVE-2000-0318

CVE-2000-0318 affects Atrium Mercur Mail Server 3.2 via a local directory traversal vulnerability (dot-dot). The vulnerability allows a local attacker to read other users’ email and to create arbitrary files by exploiting a path traversal issue. The available documents do not provide explicit exp...

CVE-2000-0318

Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot .. attack...

CVE-2000-0354

mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory...

CVE-2000-0691: Undefined Security Weakness

The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.lastrun to the target file...

CVE-2000-0715: Improper Link Resolution Before File Access

DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2000-0723: Undefined Security Weakness

Helix GNOME Updater helix-update 0.5 and earlier does not properly create /tmp directories, which allows local users to create empty system configuration files such as /etc/config.d/bashrc, /etc/config.d/csh.cshrc, and /etc/rc.config...

websitepro.txt

Sender: Bugtraq List From: Crono Subject: WebServer Pro 2.3.7 Vulnerability To: [email protected] -- WebSite Pro 2.3.7 Vulnerability -- WebSite Pro is a Web Server for Win95/98/NT plataforms. The vulnerability or bad server administration allow any user to create arbitrary files with...

CVS Kit CVS Server 1.10.8 - Instructed File Create

CVS Kit CVS Server 1.10.8 - Instructed File Create source: https://www.securityfocus.com/bid/1523/info The cvs client blindly trust paths returned to it by the server. Therefore, a cvs client could be tricked into creating a file anywhere on the system by a malicious server. This problem can be...

CVS Kit CVS Server 1.10.8 - Instructed File Create

source: https://www.securityfocus.com/bid/1523/info The cvs client blindly trust paths returned to it by the server. Therefore, a cvs client could be tricked into creating a file anywhere on the system by a malicious server. This problem can be tested yourself as follows. Although this example ru...

Проблема символьных линков в Open LDAP

Не проверялось наличие символьных линков при создании файла с предсказуемым именем...

Apache ASP module Apache::ASP source.asp Example File Arbitrary File Creation

The file /site/eg/source.asp is present on the remote Apache web server. This file comes with the Apache::ASP package and allows anyone to write to files in the same directory. An attacker may use this flaw to upload his own scripts and execute arbitrary commands on this host. C Tenable Network...