CVE-2000-0959

CVE-2000-0959 concerns glibc2/ld.so: the loader does not clear LD_DEBUG_OUTPUT and LD_DEBUG before invoking programs from a setuid context. This can enable a local attacker to exploit a symlink to overwrite arbitrary files. Concrete details exist in CERT/CC reports (Debian advisory) describing th...

[ADV/EXP]: RH6.x root from bash /tmp vuln + MORE

Advisory: its been fixed, check some previous messages. bash1 /tmp vulns Also: uucp exploit - file creation/overwriting symlinks kinda exploit for man/makewhatis Requires: 1 local access to run the program 2 a crash or reboot to happened 3 /etc/cron.weekly/makewhatis.cron to be executed by cron 4...

GLIBC (via /bin/su) Local Root Exploit

Exploit for linux platform in category local exploits ====================================== GLIBC via /bin/su Local Root Exploit ====================================== / Working exploit for glibc executing /bin/su To exploit this i have used a technique that overwrites the .dtors section of...

HP-UX 11.00/10.20 crontab Overwrite Files Exploit

Exploit for hp-ux platform in category dos / poc ================================================= HP-UX 11.00/10.20 crontab Overwrite Files Exploit ================================================= !/bin/sh HP-UX 11.00/10.20 crontab Kyong-won,Cho email protected Usage : ./crontab.sh if -z "$1"...

Ethereal - AFS Buffer Overflow

/ source: https://www.securityfocus.com/bid/1972/info Ethereal is a network auditing utility originally written by Gerald Combs. A problem exists in the Ethereal package which can allow a remote user to execute code. The problem exists in the AFS packet parsing routine. An algorithm string scans...

Race condition in periodic

Overview A race condition in the 'periodic' script allows local files to be overwritten. We believe that 'periodic' is typically used only with FreeBSD systems, though it may be installed on other systems. Description 'periodic' is a script used in conjunction with cron to execute jobs at specifi...

CVE-2000-0468

man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack...

OpenSSH 1.2 - .scp File CreateOverwrite

OpenSSH 1.2 - .scp File CreateOverwrite source: https://www.securityfocus.com/bid/1742/info A vulnerability exists in the 1.2.x releases of scp which, if properly exploited using a modified scp binary on the server end, can permit the remote server to spoof local pathnames and overwrite files...

Дырка в tnef

При извлечении данных из MS-TNEF-файлов не проверяется наличие служебных символов в имени файла, что позволяет переписать любой файл, принадлежащий пользователю...

Security Bulletin (MS00-042)

The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- Patch Available for "Active Setup Download" Vulnerability Originally Posted: June 29,...

CISADV000524b.txt

Cerberus Information Security Advisory CISADV000524b http://www.cerberus-infosec.co.uk/advisories.shtml Released : 24th May 2000 Name : Carello Web file overwriting vulnerability Affected Systems : Windows NT running IIS Issue : Remote attackers can write to a server and view source of .asp files...

Security Advisory: FreeBSD-SA-00:16.golddig

============================================================================= FreeBSD-SA-00:16 Security Advisory FreeBSD, Inc. Topic: golddig port allows users to overwrite local files Category: ports Module: golddig Announced: 2000-05-09 Credits: Discovered during internal ports collection...

x11amp.txt

Vulnerability: Any user can overwrite any file in the system. title=x11amp ver .70 authors=Mikael Alm, Thomas Nilsson, Olle Hallnas system=any that run this version [email protected] Grampa Elite Overview: To start out with I am pretty sure that I am not the one that has found this...

CVE-1999-0370

In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files...

CVE-1999-0049

CVE-1999-0049 affects Csetup on IRIX. The documented impact is arbitrary file creation or overwriting via Csetup. The provided sources do not specify root cause details or affected versions; remediation information is not included. Metrics in the NVD entry indicate high impact across confidential...

CVE-1999-0081

wu-ftp allows files to be overwritten via the rnfr command...

CVE-1999-0081

The provided OpenVAS entries confirm a remote vulnerability in wu-ftpd where the rnfr command can overwrite arbitrary files on the server. The root cause is a flaw in handling the RNFR sequence that enables a remote attacker to overwrite files, potentially impacting integrity (I:P) with no confid...

CVE-1999-0164

A race condition in the Solaris ps command allows an attacker to overwrite critical files...

netscape.4.5.talkback.txt

Date: Fri, 19 Mar 1999 22:45:02 -0800 From: Aleph One To: [email protected] Subject: Security hole in Netscape Communicator's 4.5 "talkback" function SuSE Security Announcement Package: netscape-4.5-9 Date: Thu Mar 18 10:22:11 CET 1999 Affected: unix operating systems using netscape communicat...

Caldera kdenetwork 1.1.1-1 Caldera OpenLinux 1.32.2 KDE KDE 1.11.1. RedHat Linux 6.0 - K-Mail File Creation

Caldera kdenetwork 1.1.1-1 Caldera OpenLinux 1.32.2 KDE KDE 1.11.1. RedHat Linux 6.0 - K-Mail File Creation // source: https://www.securityfocus.com/bid/300/info KMail is a mail user agent that comes with the kdenetwork package, part of the K Desktop Environment. A vulnerability in the way KMail...