9894 matches found
CVE-2005-1496
The DBMSScheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSIONUSER to the SYS user...
MacOS X at scheduling utilities privelege escalation
During execution of user's batch job system groups membership is not dropped...
RHEL 3 : cups (RHSA-2005:013)
Updated CUPS packages that fix several security issues are now available. The Common UNIX Printing System provides a portable printing layer for UNIXR operating systems. A buffer overflow was found in the CUPS pdftops filter, which uses code from the Xpdf package. An attacker who has the ability ...
CVE-2004-2420
Hitachi Job Management Partner JP1 JP1/File Transmission Server/FTP 6 and 7 allows remote attackers to cause a denial of service daemon halt via a port scan involving reset packets...
[Full-Disclosure] unzoo 4.4 directory travels
ddaa sseeccuurriittyy ccoonnssuullttaannttee ''''ddoouubblleess'''' aauuddiitttteedd mmaannyy mmoorree aarrcchhiivveess ssiinnssee llaasstt ttiimmee!! uunnzzoooo 44..44 hhaavvee ddiirreeccttoorryy ttrraavveerrssaall bbuugg ttoo!! bbwwaahhaahhaahhaahh!! ggiivvee mmee mmaannyy sseeccuurriittyy jjoo...
Mandrake Linux Security Advisory : LPRng (MDKSA-2002:042)
Matthew Caron pointed out that using the LPRng default configuration, the lpd daemon will accept job submissions from any remote host. These updated LPRng packages modify the job submission policy in /etc/lpd.perms to refuse print jobs from remote hosts by default. %NASLMINLEVEL 70300 C Tenable...
Microsoft Windows Task Scheduler (XP/2000) - '.job' (MS04-022)
// // Microsoft Windows 2K/XP Task Scheduler Vulnerability MS04-022 // Proof-of-Concept Exploit for English WinXP SP1 // 15 Jul 2004 // // Running this will create a file "j.job". When explorer.exe or any // file-open dialog box accesses the directory containing this file, // notepad.exe will be...
Unchecked buffer in mstask.dll
======================================================================== = Unchecked buffer in mstask.dll = = MS Bulletin posted: = http://www.microsoft.com/technet/security/bulletin/MS04-022.mspx = = Affected Software: = Microsoft Windows 2000 Service Pack 4 = Microsoft Windows XP, Microsoft...
Microsoft Windows Task Scheduler buffer overflow
Buffer overflow during .job files parsing...
Microsoft Windows Task Scheduler Remote Buffer Overflow Vulnerability
Description Microsoft Task Scheduler is reported prone to a remote stack-based buffer overflow vulnerability. The source of the vulnerability is that data in '.job' files is copied into an internal buffer without sufficient bounds checking. It is reported that a remote attacker may exploit this...
RHEL 2.1 : LPRng (RHSA-2002:120)
The LPRng print spooler, as shipped in Red Hat Linux Advanced Server 2.1, accepts all remote print jobs by default. Updated LPRng packages are available to fix this issue. With its default configuration, LPRng will accept job submissions from any host, which is not appropriate in a workstation...
Lam3rZ Security Advisory #2/2004: LSF eauth vulnerability leads to a possibility of controlling cluster jobs on behalf of other users
Lam3rZ Security Advisory 2/2004 23 Feb 2004 Remote within a cluster root in LSF Name: Load Sharing Facility versions 4.x, 5.x, 6.x Severity: High Vendor URL: http://www.platform.com Author: Tomasz Grabowski [email protected] Vendor notified: 29 Oct 2003 Vendor confirmed: 30 Oct 2003 Vendor...
Important: Red Hat Security Advisory: : : : Updated LPRng packages fix psbanner vulnerability
Updated LPRng packages for Red Hat Linux on IBM iSeries and pSeries systems resolve a temporary file vulnerability and an insecure default. LPRng is a print spooler. LPRng includes a program, psbanner, that can be used to produce Postscript banner pages to separate print jobs. A vulnerability has...
CVE-2003-0517: Improper Link Resolution Before File Access
faxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink attack on JOB files...
PT-2003-1686 · Mgetty · Mgetty
Name of the Vulnerable Software and Affected Versions: mgetty versions 1.1.28 and earlier Description: The issue allows local users to overwrite files via a symlink attack on JOB files. This is achieved by exploiting the faxrunqd.in component in the affected software. Recommendations: For mgetty...
CVE-2003-0354: Undefined Security Weakness
Unknown vulnerability in GNU Ghostscript before 7.07 allows attackers to execute arbitrary commands, even when -dSAFER is enabled, via a PostScript file that causes the commands to be executed from a malicious print job...
Important: Red Hat Security Advisory: LPRng security update
The LPRng print spooler, as shipped in Red Hat Linux Advanced Server 2.1, accepts all remote print jobs by default. Updated LPRng packages are available to fix this issue. With its default configuration, LPRng will accept job submissions from any host, which is not appropriate in a workstation...
Microsoft SQL 2000/7.0 - Agent Jobs Privilege Escalation
source: https://www.securityfocus.com/bid/5483/info Microsoft SQL Server 2000 uses an Agent which is responsible for restarting the SQL Server service, replication, and running scheduled jobs. Some of the jobs that the Agent executes have weak permissions, which could allow a user with low...
Important: Red Hat Security Advisory: : Relaxed LPRng job submission policy
The LPRng print spooler, as shipped in Red Hat Linux 7.x, accepts all remote print jobs by default. With its default configuration, LPRng will accept job submissions from any host, which is not appropriate in a workstation environment. We are grateful to Matthew Caron for pointing out this...