Teradata Virtual Machine Community Edition 15.0 Insecure File Creation

Title: Teradata Virtual Machine Community Edition v15.10 Insecure creation of files in /tmp Author: Larry W. Cashdollar, @larry0 Date: 2016-10-01 Download Site: http://downloads.teradata.com/download/database/teradata-virtual-machine-community-edition-for-vmware Vendor: Teradata Vendor Notified:...

Teradata Virtual Machine Community Edition Code Execution Vulnerability

Teradata Virtual Machine Community Edition is a Teradata virtual container packaged with the SUSE Linux Enterprise Server SLES operating system and Teradata databases to run in a virtualized environment on third-party hardware. A code execution vulnerability exists in Teradata Virtual Machine...

Teradata Virtual Machine Community Edition 15.10 Insecure File Permission Vulnerability

Teradata Virtual Machine Community Edition version 15.10 suffers from an insecure file permission vulnerability. Title: Teradata Virtual Machine Community Edition v15.10 has insecure file permission Author: Larry W. Cashdollar, @larry0 Date: 2016-10-01 Download Site:...

Teradata Virtual Machine Community Edition 15.10 Insecure File Permission

Title: Teradata Virtual Machine Community Edition v15.10 has insecure file permission Author: Larry W. Cashdollar, @larry0 Date: 2016-10-01 Download Site: http://downloads.teradata.com/download/database/teradata-virtual-machine-community-edition-for-vmware Vendor: Teradata Vendor Notified:...

CVE-2016-7490

The installation script studioexpressinstall for Teradata Studio Express 15.12.00.00 creates files in /tmp insecurely. A malicious local user could create a symlink in /tmp and possibly clobber system files or perhaps elevate privileges...

CVE-2016-7489

Teradata Virtual Machine Community Edition v15.10's perl script /opt/teradata/gsctools/bin/t2a.pl creates files in /tmp in an insecure manner, this may lead to elevated code execution...

CVE-2016-7489

Teradata Virtual Machine Community Edition v15.10 is affected by an insecure file-creation flaw in the perl script /opt/teradata/gsctools/bin/t2a.pl, which creates temporary files in /tmp. The root cause is insecure handling of /tmp files, enabling a local user to inject/execute commands (e.g., b...

CVE-2016-7488

Teradata Virtual Machine Community Edition v15.10 has insecure file permissions on /etc/luminex/pkgmgr, enabling a local user to modify its contents and execute commands as root. The issue originates from insecure permissions in the /etc/luminex directory (pkgmgr file). Public references indicate...

CVE-2016-7488

Teradata Virtual Machine Community Edition v15.10 has insecure file permissions on /etc/luminex/pkgmgr. These could allow a local user to modify its contents and execute commands as root...

Candlepin 'subscription-manager' Insecure File Permissions Vulnerability

Candlepin is a collection of subscription tools that allow companies to manage their software. An insecure file permission vulnerability exists in Candlepin 'subscription-manager'. A local attacker could gain access to world-readable files and extract sensitive information from them...

Schneider Electric Unity PRO Remote Code Execution Vulnerability

Unity Pro is the universal IEC61131-3 programming, debugging and runtime software package for Premium, Atrium and Quantum PLCs. A remote code execution vulnerability exists in Schneider Electric Unity PRO in an insecure file download, which can be exploited by a remote attacker to execute arbitra...

HP TouchSmart Calendar 4.1.4245 - Insecure File Permissions Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits + Credits: John Page aka hyp3rlinx Vendor: ========== www.hp.com Product: =========================================== Hewlett Packard TouchSmart Calendar Service File version : 4.1.4245 HP TouchSmart Calendar is a shared calendar where you c...

HP TouchSmart Calendar 4.1.4245 - Insecure File Permissions Privilege Escalation

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/HP-TOUCHSMART-CALENDAR-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Vendor: ========== www.hp.com Product: =========================================== Hewlett Packard...

Minecraft 1.6.61 Privilege Escalation

Minecraft Launcher: https://minecraft.net Version: 1.6.61 By Ross Marks: http://www.rossmarks.co.uk Exploit-db: https://www.exploit-db.com/author/?a=8724 Category: Local Tested on: Windows 10 x86/x64 1 Insecure File Permissions Local Privilege Escalation Minecraft's launcher minecraftLauncher.exe...

CVE-2016-8605

A vulnerability was found in guile, in the mkdir procedure's usage of umask2. Under particular circumstances, an attacker could influence an application written in guile to create directories or files insecurely, potentially exposing them to being read or manipulated by local users...

Minecraft Launcher - Insecure File Permissions Privilege Escalation

Exploit for windows platform in category local exploits Minecraft Launcher: https://minecraft.net Version: 1.6.61 By Ross Marks: http://www.rossmarks.co.uk Exploit-db: https://www.exploit-db.com/author/?a=8724 Category: Local Tested on: Windows 10 x86/x64 1 Insecure File Permissions Local Privile...

Minecraft Launcher 1.6.61 - Insecure File Permissions Privilege Escalation

Minecraft Launcher 1.6.61 - Insecure File Permissions Privilege Escalation Minecraft Launcher: https://minecraft.net Version: 1.6.61 By Ross Marks: http://www.rossmarks.co.uk Exploit-db: https://www.exploit-db.com/author/?a=8724 Category: Local Tested on: Windows 10 x86/x64 1 Insecure File...

Minecraft Launcher 1.6.61 - Insecure File Permissions Privilege Escalation

Minecraft Launcher: https://minecraft.net Version: 1.6.61 By Ross Marks: http://www.rossmarks.co.uk Exploit-db: https://www.exploit-db.com/author/?a=8724 Category: Local Tested on: Windows 10 x86/x64 1 Insecure File Permissions Local Privilege Escalation Minecraft's launcher minecraftLauncher.exe...

Zend Studio IDE 13.5.1 - Insecure File Permissions Privilege Escalation

Exploit for windows platform in category local exploits + Credits: John Page aka hyp3rlinx Vendor: ============ www.zend.com Product: ====================== ZendStudio IDE v13.5.1 Zend Studio is the leading PHP IDE. It is the only PHP IDE that combines mobile development with PHP and includes a...

Zend Studio IDE 13.5.1 - Insecure File Permissions Privilege Escalation

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ZEND-STUDIO-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Vendor: ============ www.zend.com Product: ====================== ZendStudio IDE v13.5.1 Zend Studio is the leading...