316 matches found
iDefense Security Advisory 07.15.08: Oracle Database Local Untrusted Library Path Vulnerability
iDefense Security Advisory 07.15.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 15, 2008 I. BACKGROUND Oracle Database Server is a family of database products that range from personal databases to enterprise solutions. Further information is available at the following URL...
sblim: libraries built with insecure RPATH
Untrusted search path vulnerability in a certain Red Hat build script for Standards Based Linux Instrumentation for Manageability sblim libraries before 1-13a.el46.1 in Red Hat Enterprise Linux RHEL 4, and before 1-31.el52.1 in RHEL 5, allows local users to gain privileges via a malicious library...
tomboy code execution
Invalid dynamic library path...
Debian Security Advisory DSA 707-1 (mysql)
The remote host is missing an update to mysql announced via advisory DSA 707-1. OpenVAS Vulnerability Test $Id: deb7071.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 707-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
QNX 6.26.3 - Multiple Privilege Escalation Denial of Service Vulnerabilities
QNX 6.26.3 - Multiple Privilege Escalation Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/16539/info QNX is susceptible to multiple local vulnerabilities. These issues include multiple buffer-overflow vulnerabilities, a format-string vulnerability, an insecure...
QNX 6.2/6.3 - Multiple Privilege Escalation / Denial of Service Vulnerabilities
source: https://www.securityfocus.com/bid/16539/info QNX is susceptible to multiple local vulnerabilities. These issues include multiple buffer-overflow vulnerabilities, a format-string vulnerability, an insecure library-path vulnerability, insecure default-directory-permission vulnerability, and...
DEBIAN-CVE-2005-4158
Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the 1 PERLLIB, 2 PERL5LIB, and 3 PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are included...
CVE-2005-0627
Qt before 3.3.4 searches the BUILDPREFIX directory, which could be world-writable, to load shared libraries regardless of the LDLIBRARYPATH environment variable, which allows local users to execute arbitrary programs...
CVE-2005-0710
MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path restrictions and execute arbitrary libraries by using INSERT INTO to modify the mysql.func table, which is processed by the udfinit function...
Debian DSA-707-1 : mysql - several vulnerabilities
Several vulnerabilities have been discovered in MySQL, a popular database. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2004-0957 Sergei Golubchik discovered a problem in the access handling for similar named databases. If a user is granted privileges...
CVE-2005-0710
MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path restrictions and execute arbitrary libraries by using INSERT INTO to modify the mysql.func table, which is processed by the udfinit function...
MySQL < 4.0.24 / 4.1.10a Multiple Vulnerabilities
The remote host is running a version of MySQL which older than version 4.0.24 or 4.1.10a. Such versions are potentially affected by multiple issues. - MySQL uses predictable file names when creating temporary tables, which allows local users with 'CREATE TEMPORARY TABLE' privileges to overwrite...
Privelege escalation in LSF
Dynamic library is loaded in the path specified by user...
expect to get hacked
====================== expect to get hacked ====================== After looking at a recent discussion on vuln-dev, I decided that this might as well be released again. Makes the process of exploiting expect a little rpm -qf which expect expect-5.31-46 Under Redhat 7.0 expect uses the wrong path...
Дырка в gtk+ (GTK_MODULES)
Пользователь может указать расположение библиотек через переменную GTKMODULES...
PT-1995-1001
Name of the Vulnerable Software and Affected Versions Telnet affected versions not specified Description The issue allows a remote client to specify environment variables, including LD LIBRARY PATH, which can be exploited by an attacker to bypass the normal system libraries and gain root access...