7801 matches found
CVE-1999-0906
Buffer overflow in sccw allows local users to gain root access via the HOME environmental variable...
CVE-1999-0906
The CVE-1999-0906 entry describes a local buffer overflow in sccw that allows escalation to root via the HOME environment variable. The connected KITPLOIT reference mentions an attack example and lists CVE-1999-0906, but none of the provided documents specify the affected product/vendor/version, ...
CVE-2000-0230
Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable...
Halloween Linux 4.0 RedHat Linux 6.16.2 - imwheel (1)
Halloween Linux 4.0 RedHat Linux 6.16.2 - imwheel 1 // source: https://www.securityfocus.com/bid/1060/info A vulnerability exists in the 'imwheel' package for Linux. This package is known to be vulnerable to a buffer overrun in its handling of the HOME environment variable. By supplying a...
CVE-2000-0054
The CVE-2000-0054 entry describes a directory traversal vulnerability in the CGI script search.cgi of the SolutionScripts Home Free package. An unauthenticated remote attacker can use .. sequences in the letter parameter to read arbitrary files from the affected web server, subject to the server ...
CVE-1999-0863
CVE-1999-0863 concerns a buffer overflow in FreeBSD seyon. The vulnerability can be triggered via the HOME environment variable, the -emulator argument, the -modems argument, or the GUI, indicating an input-handling overflow in the SeYON component. Affected status/versions are not fully specified...
Solution Scripts Home Free 1.0 - 'search.cgi' Directory Traversal
source: https://www.securityfocus.com/bid/921/info Home Free is a suite of Perl cgi scripts that allow a website to support user contributions of various types. One of the scripts, search.cgi, accepts a parameter called letter which can be any text string. The supplied argument can contain the...
Solution Scripts Home Free 1.0 - search.cgi Directory Traversal
Solution Scripts Home Free 1.0 - search.cgi Directory Traversal source: https://www.securityfocus.com/bid/921/info Home Free is a suite of Perl cgi scripts that allow a website to support user contributions of various types. One of the scripts, search.cgi, accepts a parameter called letter which...
CVE-1999-0201
CVE-1999-0201 describes an information-disclosure vulnerability in FTP servers where issuing a CWD (quote CWD) command can reveal the full path of the ftp user’s home directory. The vulnerability is linked to ftpd-style servers; the underlying issue is that the CWD response exposes filesystem pat...
CVE-1999-0201
A quote cwd command on FTP servers can reveal the full path of the home directory of the "ftp" user...
SuSE_overflow_exploit.txt
Greetings, My last post regarding a sccw exploit simply allowed any user to read any file on the system but, of course, didn't yield any instant root. A much more serious problem now exists in the form of a HOME environment variable buffer overflow. If you hadn't removed the s-bit before, now is...
Knox Arkeia 4.0 Backup - Local Overflow
/ source: https://www.securityfocus.com/bid/661/info Knox Software Arkeia 4.0 Backup rnavc & nlserverd HOME Environment Variable Buffer Overflow A local buffer overflow in the handling of the HOME environment variable by the rlserver and rnavc binaries that are part of the Knox Software Arkiea...
Knox Arkeia 4.0 Backup - Local Overflow
Knox Arkeia 4.0 Backup - Local Overflow / source: https://www.securityfocus.com/bid/661/info Knox Software Arkeia 4.0 Backup rnavc & nlserverd HOME Environment Variable Buffer Overflow A local buffer overflow in the handling of the HOME environment variable by the rlserver and rnavc binaries that...
ffingerd.txt
Date: Fri, 23 Apr 1999 19:26:13 +0300 From: Eilon Gishri To: [email protected] Subject: Ffingerd privacy issues Hi, I found a couple of bugs in ffingerd 1.19 which are related to privacy. Here goes: The permission on root's home directory are now 700 /home/root. ----- aristo/cc/eilonfinger...
CVE-1999-0733
Buffer overflow in VMWare 1.0.1 for Linux via a long HOME environmental variable...
Multiple FTP Server QUOTE CWD Command Home Path Disclosure
It is possible to determine the full path of the home directory of the 'ftp' user by issuing the 'CWD' command. An attacker can exploit this to determine where to put a .rhost file using other security flaws. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10087;...
[SECURITY] New versions of cfengine fixes symlink attack
The maintainer of Debian GNU/Linux cfengine package found a error in the way cfengine handles temporary files when it runs the tidy action on homedirectories, which makes it suspectible to a symlink attack. The author has been notified of the problem but has not released a fix yet. We recommend y...
CVE-2000-0054
search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a .. dot dot attack...
HP HP-UX 10.34 rlpdaemon - Remote Overflow
/ source: https://www.securityfocus.com/bid/150/info A number of vulnerabilities exist in Hewlett Packard's rlpdaemon under HPUX 9.x and 10.x. These vulnerabilities may allow for a remote attacker to access the system under the lp user account, as well as execute arbitrary commands remotely, also...