83 matches found
Mandrake Linux Security Advisory : gpm (MDKSA-2000:002)
A security bug was found in gpm-root; the bug can be exploited to provide local users with root access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake Linux Security Advisory MDKSA-2000:002. The text itself ...
Firepack (admin/ref.php) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ====================================================== Firepack admin/ref.php Remote Code Execution Exploit ====================================================== !/usr/bin/perl Firepack - Remote Command\Code Execution Exploit Firepack is ...
PHP Visit Counter <= 0.4 (datespan) SQL Injection Vulnerability
Exploit for unknown platform in category web applications =============================================================== PHP Visit Counter = 0.4 datespan SQL Injection Vulnerability =============================================================== PHP Visit Counter = 0.4 - SQL Injection...
Azuresites CMS - Multiple Vulnerabilities
Azuresites CMS - Multiple Vulnerabilities AzureSites CMS - Multiple Vulnerabilities Vulnerabilities discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, GPM, Free-Hack, Ciphercrew, h4ck-y0u Date: 26.05.2008 Vulnerabilities: 1. SQL Injection 1.1...
mumbojumbo-sql.txt
php '.$argv0.' http://www.site.com/cms/ 300 1 '; if $argc 1 printr' '; echo 'Searching for Admin: '; for$i=1; $i = 50; $i++ $temp1 = filegetcontents$argv1.'index.php?id='.$argv2.'+and+lengthselect+kennung+from+op4admin+where+id='.$argv3.'='.$i.'--'; if strpos$temp1,'Die angeforderte Seite existie...
Mumbo Jumbo Media OP4 Remote Blind SQL Injection Exploit
No description provided by source. ?php iniset"maxexecutiontime",0; printr' Mumbo Jumbo Media - OP4 - Blind SQL Injection Exploit Vulnerability discovered by: LidlosesAuge Exploit coded by: LidlosesAuge Greetz to: Free-Hack, GPM Date: 13.04.2008 Dork: "mumbo jumbo media" + inurl:"index.php" Usage...
Debian Security Advisory DSA 095-1 (gpm)
The remote host is missing an update to gpm announced via advisory DSA 095-1. OpenVAS Vulnerability Test $Id: deb0951.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 095-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 095-1 (gpm)
The remote host is missing an update to gpm announced via advisory DSA 095-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-095-1 : gpm - local root vulnerability
The package 'gpm' contains the gpm-root program, which can be used to create mouse-activated menus on the console. Among other problems, the gpm-root program contains a format string vulnerability, which allows an attacker to gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security,...
CVE-2001-1203
Format string vulnerability in gpm-root in gpm 1.17.8 through 1.17.18 allows local users to gain root privileges...
CVE-2001-1203
The CVE corresponds to a local root vulnerability in the gpm package (gpm-root) where a format string flaw in gpm 1.17.8–1.17.18 allows local privilege escalation. Debian and OpenVAS entries describe the issue as requiring an update to gpm (DSA-095-1); Nessus notes this as a Debian local root adv...
CVE-2001-1203: Undefined Security Weakness
Format string vulnerability in gpm-root in gpm 1.17.8 through 1.17.18 allows local users to gain root privileges...
CVE-1999-1146: Undefined Security Weakness
Vulnerability in Glance and gpm programs in GlancePlus for HP-UX 9.x and earlier allows local users to access arbitrary files and gain privileges...
[SECURITY] [DSA-095-1] gpm (gpm-root) format string vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-095-1 [email protected] http://www.debian.org/security/ Robert van der Meulen December 27, 2001 - ------------------------------------------------------------------------ Package : gpm Problem...
CVE-2001-1203
Format string vulnerability in gpm-root in gpm 1.17.8 through 1.17.18 allows local users to gain root privileges...
gpm creates temporary files insecurely
Overview gpm version 1.19.3, which usually runs as root, is vulnerable due to a flaw that allows a local user to exploit a race condition to corrupt files that gpm uses. Description gpm General Purpose Mouse is a program that lets you use the mouse in console mode when not using XWindows. It is...
Linux gpm daemon allows arbitrary file removal
Overview gpm version 1.19.2 and earlier are vulnerable due to a flaw that allows a local user to delete arbitrary files. Description gpm General Purpose Mouse is the program that lets you use the mouse in console mode when not using XWindows. It is usually included in Linux distributions, and can...
gpm-root fails to correctly release GID 0 membership for user defined menus
Overview gpm-root does not properly drop group privileges. Local users can gain group privileges by starting a utility from gpm-root. The gpm package is usually included in Linux distributions, and can be started from the command line or in the startup script /etc/rc.d/rc.local. Description gpm...
CVE-2001-0116
The CVE concerns gpm 1.19.3 where a race condition allows a local user to exploit predictable /tmp filenames and symlink targets to overwrite/modify files the privileged gpm process uses. This is described in CERT/CC and Mandrake advisories, which note a temporary-file handling flaw; the impact i...