1452 matches found
xfinder-ds.pl
HEADER: OSX Finder DSStore arbitrary file overwrite vulnerability. CONTACT: vade79 - [email protected] fakehalo/realhalo CATEGORY: Local with user intervention. IMPACT: Privilege escalation. REFERENCE: http://fakehalo.us/xfinder-ds.pl BACKGROUND: The Finder is the application that Mac OS X and earli...
CVE-2005-0342
The CVE-2005-0342 entry concerns macOS Finder: a local privilege escalation where an attacker can overwrite arbitrary files by creating a hard link from the .DS_Store file to a target file. This is described for Mac OS X and earlier, with the Finder vulnerable to privilege gain via this hard-link...
CVE-2005-0342: Undefined Security Weakness
The Finder in Mac OS X and earlier allows local users to overwrite arbitrary files and gain privileges by creating a hard link from the .DSStore file to an arbitrary file...
Apple Mac OSX - .DS_Store Arbitrary File Overwrite
Apple Mac OSX - .DSStore Arbitrary File Overwrite !/usr/bin/perl OSX Finder DSStore arbitrary file overwrite exploit. root version vade79 - [email protected] fakehalo/realhalo this will create a directory called "xfinder" in your home directory, once the root user has modified that directory using...
[SA13635] Rpm Finder "web()" Buffer Overflow and Insecure File Creation
TITLE: Rpm Finder "web" Buffer Overflow and Insecure File Creation SECUNIA ADVISORY ID: SA13635 VERIFY ADVISORY: http://secunia.com/advisories/13635/ CRITICAL: Moderately critical IMPACT: Privilege escalation, System access WHERE: From remote SOFTWARE: Rosiello Rpm Finder rpf 1.x...
CVE-2004-0539: Undefined Security Weakness
The "Show in Finder" button in the Safari web browser in Mac OS X 10.3.4 and 10.2.8 may execute downloaded applications, which could allow remote attackers to execute arbitrary code...
CVE-2003-0876
CVE-2003-0876 affects Mac OS X Finder in 10.2.8 and earlier. When directories are dragged from a mounted volume (e.g., a DMG), Finder resets their permissions to global read/write/execute, resulting in directories potentially having less restrictive permissions than intended. The impact described...
CVE-2003-0876: Undefined Security Weakness
Finder in Mac OS X 10.2.8 and earlier sets global read/write/execute permissions on directories when they are dragged copied from a mounted volume such as a disk image DMG, which could cause the directories to have less restrictive permissions than intended...
Pirch/RusPirch bug
Vulnerable: Pirch & RusPirch Vulnerability: Aux bug Authors of the programme: www.pirchat.com Bug finder: j0k3r www.dhgroup.org Description: Pirch – IRC client for Microsoft Windows. RusPirch - it's Russian clone. If auto-log function for queries is on, you have to change your nick to "aux" and...
Apple Open Firmware 4.1.74.1.8 - Insecure Password
Apple Open Firmware 4.1.74.1.8 - Insecure Password source: https://www.securityfocus.com/bid/3186/info A user who has set an Open Firmware password on their Apple system believes it to be safe when powered down. There is a tool that any user with access to the Finder can run in order to reveal th...