7633 matches found
PT-2003-1686 · Mgetty · Mgetty
Name of the Vulnerable Software and Affected Versions: mgetty versions 1.1.28 and earlier Description: The issue allows local users to overwrite files via a symlink attack on JOB files. This is achieved by exploiting the faxrunqd.in component in the affected software. Recommendations: For mgetty...
Important: Red Hat Security Advisory: LPRng security update
The LPRng print spooler, as shipped in Red Hat Linux Advanced Server 2.1, accepts all remote print jobs by default. Updated LPRng packages are available to fix this issue. With its default configuration, LPRng will accept job submissions from any host, which is not appropriate in a workstation...
Microsoft SQL 2000/7.0 - Agent Jobs Privilege Escalation
source: https://www.securityfocus.com/bid/5483/info Microsoft SQL Server 2000 uses an Agent which is responsible for restarting the SQL Server service, replication, and running scheduled jobs. Some of the jobs that the Agent executes have weak permissions, which could allow a user with low...
Important: Red Hat Security Advisory: : Relaxed LPRng job submission policy
The LPRng print spooler, as shipped in Red Hat Linux 7.x, accepts all remote print jobs by default. With its default configuration, LPRng will accept job submissions from any host, which is not appropriate in a workstation environment. We are grateful to Matthew Caron for pointing out this...
Privelege escalation via cron in OpenBSD
During mail'ing of job results shell characters are not properly escaped for mail command...
OpenBSD 2.93.0 - Default Crontab Root Command Injection
OpenBSD 2.93.0 - Default Crontab Root Command Injection / source: https://www.securityfocus.com/bid/4495/info OpenBSD ships with a number of cron jobs configured by default. The tasks are for the purpose of summarizing system information. The mail1 utility is used to send the summaries to the roo...
sastcpd 8.0 'authprog' local root vulnerability
Hi, Several environment variable problems exist in the 'SAS Job Spawner for Open Systems version 8.00'. No other releases of the software were available to test. Sorry. authprog vulnerability ---------------------- The daemon passes a user-defined environment variable, 'authprog', to execve. This...
sastcpd Buffer Overflow and Format String Vulnerabilities
---------------------------------------------------------- sastcpd Buffer Overflow and Format String Vulnerabilities Ministry-of-Peace - www.ministryofpeace.co.uk ---------------------------------------------------------- SYNOPSIS "SAS software provides the foundation, tools, and solutions for da...
Diskcheck 3.1.1 Symlink Vulnerability
Diskcheck 3.1.1 Symlink Vulnerability 1 Introduction DiskCheck is a Perl script that monitors how much space is available on your hard drive. Basically, it checks your drive space every hour and takes action based on the specifications in the config file /etc/diskcheck.conf. DiskCheck 3.1.1 is...
local user can delete arbitrary files on SuSE-Linux
Hello, If MAXDAYSINTMP 0 in /etc/rc.config on a SuSE-Linux system, a local user can delete arbitrary files by doing some commands like these: mkdir -p "/tmp/hhh /somedirectory" touch -t some-early-date "/tmp/hhh /somedirectory/somefile" sleep 1d The bug is in /etc/cron.daily/aaabase for SuSE...
Дырка в Generic-NQS
утверждается, что в обработчике пакетных заданий имеется ошибка, позволяющая локальному пользователю получить привилегии root...
NetIQ.txt
AppManager 2.0 from NetIQ displays passwords in clear text! AppManager is a product which enables an enterprise to monitor the performance and availability of Windows NT server services such as Exchange, SQL, etc. It does this via an agent on the target machine which reports back to a console. Th...
