APC PowerChute Plus 4.2.2 - Denial of Service

APC PowerChute Plus 4.2.2 - Denial of Service // source: https://www.securityfocus.com/bid/83/info // // APC PowerChute PLUS is a software package that will safely shutdown computer systems locally or accross a network when UPS power starts to fail. When operating PowerChute PLUS normally listens...

APC PowerChute Plus 4.2.2 - Denial of Service

// source: https://www.securityfocus.com/bid/83/info // // APC PowerChute PLUS is a software package that will safely shutdown computer systems locally or accross a network when UPS power starts to fail. When operating PowerChute PLUS normally listens to TCP ports 6547 and 6548, as well as for...

Slackware Linux 3.4 - liloconfig-color Temporary File

Slackware Linux 3.4 - liloconfig-color Temporary File source: https://www.securityfocus.com/bid/77/info liloconfig-color creates the file /tmp/reply insecurely and follows symbolic links. An attacker can create a symbolic link from /tmp/reply to any file and wait for root to run the program. This...

IBM AIX 4.2.1 - usrbinportmir Local Buffer Overflow Insecure Temporary File Creation

IBM AIX 4.2.1 - usrbinportmir Local Buffer Overflow Insecure Temporary File Creation / source: https://www.securityfocus.com/bid/385/info AIX version 4.2.1 introduced a new command titled 'portmir'. This new program had two notable vulnerabilites. First it contained a buffer overflow which allowe...

IBM AIX 4.2.1 - '/usr/bin/portmir' Local Buffer Overflow / Insecure Temporary File Creation

/ source: https://www.securityfocus.com/bid/385/info AIX version 4.2.1 introduced a new command titled 'portmir'. This new program had two notable vulnerabilites. First it contained a buffer overflow which allowed malicious users to obtain root privileges. Secondly it wrote it's log files to a...