2189 matches found
Microsoft SQL 20007.0 - Agent Jobs Privilege Escalation
Microsoft SQL 20007.0 - Agent Jobs Privilege Escalation source: https://www.securityfocus.com/bid/5483/info Microsoft SQL Server 2000 uses an Agent which is responsible for restarting the SQL Server service, replication, and running scheduled jobs. Some of the jobs that the Agent executes have we...
ISSalert: ISS Advisory: Remote Buffer Overflow Vulnerability in BSD Line Printer Daemon
Internet Security Systems Security Advisory August 29, 2001 Remote Buffer Overflow Vulnerability in BSD Line Printer Daemon Synopsis: Internet Security Systems ISS X-Force has discovered a vulnerability in several BSD implementations. A buffer overflow vulnerability exists in the BSD Unix line...
Various shells create temporary files insecurely when using << operator
Overview sh uses /tmp files of a predictable name in creating files for input redirection using the operator. Description When performing the "" redirection, /bin/sh creates a temporary file in /tmp with a name based on the process id, writes subsequent input out to that file, and then closes the...
UUCP - File Creation/Overwriting Symlinks
/ root exploit: multiple subsystem errors allowing root exploit bashack.c - Thu Nov 30 21:50:50 NZDT 2000 redhat 6.1 /etc/rc.d/ and scripts that are trusting the untrustworthy. /bin/sh acts silly when u get it to use the include define FNAME "/usr/man/man1/last.1.gz;export PATH=.;cd ..;cd ..;cd...
tcsh: unsafe tempfile in << redirects
PROBLEM: /tmp echo 'hello world' rootfile /tmp chmod 600 rootfile /tmp ln -s rootfile sh$$ /tmp chown -h 666.666 sh$$ /tmp ls -l rootfile sh$$ -rw------- 1 root root 12 Oct 29 03:55 rootfile lrwxrwxrwx 1 666 666 8 Oct 29 03:56 sh12660 - rootfile /tmp cat BAR ? FOO ? BAR FOO o world /tmp ls -l...
rootcron.txt
!/bin/sh clear echo '------------------------------------------------------------------' echo 'Marchew Hyperreal Industries ' echo 'Stumilowy Las Team ' echo '---------------------------- presents ----------------------------' echo echo ' -= vixie-cron root sploit by Michal Zalewski =-' echo echo...
HP LaserJet Printer Unauthenticated Access
The remote printer has no password set. This allows anyone to change its IP or potentially to intercept print jobs sent to it. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10172; scriptversion "1.29"; scriptcvsdate"Date: 2018/07/24 18:56:11";...
