5329 matches found
HP-UX PHSS_28099 : HP-UX Running Apache, Increased Privileges or Denial of Service (DoS) or Execution of Arbitrary Code (HPSBUX00224 SSRT2393 rev.3)
s700800 11.04 Virtualvault 4.6 OWS update : Potential vulnerability regarding ownership permissions of System V shared memory based scoreboards. CERT VU825353, CVE CAN-2002-0839 Potential cross-site scripting vulnerability in the default error page when using wildcard DNS. CERT VU240329, CVE...
HP-UX PHSS_28705 : HP-UX Running Apache, Increased Privileges or Denial of Service (DoS) or Execution of Arbitrary Code (HPSBUX00224 SSRT2393 rev.3)
s700800 11.X OV NNM6.2 Intermediate Patch, Feb 2003 : Potential vulnerability regarding ownership permissions of System V shared memory based scoreboards. CERT VU825353, CVE CAN-2002-0839 Potential cross-site scripting vulnerability in the default error page when using wildcard DNS. CERT VU240329...
CVE-2004-2197
kdocker.cpp in kdocker 0.1 through 0.8 does not properly check the ownership of files, which could allow local users to execute arbitrary programs...
Linux Kernel 2.6.7-rc3 (Slackware 9.1 Debian 3.0) - sys_chown() Group Ownership Alteration Privilege Escalation
Linux Kernel 2.6.7-rc3 Slackware 9.1 Debian 3.0 - syschown Group Ownership Alteration Privilege Escalation / $Id: raptorchown.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorchown.c - syschown missing DAC controls on Linux Copyright c 2004 Marco Ivaldi Unknown vulnerability in Linux kernel 2.x may...
Linux Kernel < 2.6.7-rc3 (Slackware 9.1 / Debian 3.0) - 'sys_chown()' Group Ownership Alteration Privilege Escalation
/ $Id: raptorchown.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorchown.c - syschown missing DAC controls on Linux Copyright c 2004 Marco Ivaldi Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4 CAN-2004-0497...
Linux Kernel 2.6.x chown() Group Ownership Alteration Exploit
Exploit for linux platform in category local exploits ============================================================= Linux Kernel 2.6.x chown Group Ownership Alteration Exploit ============================================================= / $Id: raptorchown.c,v 1.1 2004/12/04 14:44:38 raptor Exp $...
[SA13201] PunBB Private Message System Module Two Vulnerabilities
TITLE: PunBB Private Message System Module Two Vulnerabilities SECUNIA ADVISORY ID: SA13201 VERIFY ADVISORY: http://secunia.com/advisories/13201/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Exposure of sensitive information WHERE: From remote SOFTWARE: Private Message System modul...
[Full-Disclosure] cPanel hardlink chown issue
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Name: cPanel Vendor URL: http://www.cpanel.net Author: Karol Wisek [email protected] Date: July 31, 2004 Issue: cPanel allows logged in users to change ownership of any file to their uid:gid. Description: cPanel is a next generation web hostin...
freebsd/x86 chown 0:0 chmod 6755 & execve /tmp/sh 44 bytes
No description provided by source. / FreeBSD shellcode chown"/tmp/sh", 0, 0; chmod"/tmp/sh", 06755; 44 bytes Claes M. Nyberg 20020209 [email protected], [email protected] / / void mainvoid asm" xor %eax, %eax eax = 0 pushl %eax string ends with NULL pushl $0x68732f2f push 'hs//' //sh push...
freebsd/x86 chown 0:0 , chmod 6755 & execve /tmp/sh 44 bytes
Exploit for freebsd/x86 platform in category shellcode ============================================================ freebsd/x86 chown 0:0 , chmod 6755 & execve /tmp/sh 44 bytes ============================================================ / FreeBSD shellcode chown"/tmp/sh", 0, 0; chmod"/tmp/sh",...
GLSA-200408-15 : Tomcat: Insecure installation
The remote host is affected by the vulnerability described in GLSA-200408-15 Tomcat: Insecure installation The Gentoo ebuild for Tomcat sets the ownership of the Tomcat init scripts as tomcat:tomcat, but those scripts are executed with root privileges when the system is started. This may allow a...
Tomcat: Insecure installation
Background Tomcat is the Apache Jakarta Project's official implementation of Java Servlets and Java Server Pages. Description The Gentoo ebuild for Tomcat sets the ownership of the Tomcat init scripts as tomcat:tomcat, but those scripts are executed with root privileges when the system is started...
RHEL 2.1 : shadow-utils (RHSA-2003:058)
Updated shadow-utils packages are now available. These updated packages correct a bug that caused the useradd tool to create mail spools with incorrect permissions. The shadow-utils package includes programs for converting UNIX password files to the shadow password format, plus programs for...
KisMAC multiple bugs
Ownership changing, symlink problem, uncommented shell-characters...
CVE-2003-0501
The /proc filesystem in Linux allows local users to obtain sensitive information by opening various entries in /proc/self before executing a setuid program, which causes the program to fail to change the ownership and permissions of those entries...
CDRTools 2.0 - RSCSI Debug File Arbitrary Local File Manipulation
source: https://www.securityfocus.com/bid/8328/info It has been reported that the rscsi utility may provide for the modification of ownership and the corruption of arbitrary attacker specified files. It has been reported that a local attacker may invoke the rscsi utility to corrupt or seize group...
DSA-352 fdclone - insecure temporary directory
Bulletin has no description...
Multiple U2 Universe bugs
Problems with creating hard links, buffer overflow, changing files ownership, etc...
Moderate: Red Hat Security Advisory: shadow-utils security update
Updated shadow-utils packages are now available. These updated packages correct a bug that caused the useradd tool to create mail spools with incorrect permissions. The shadow-utils package includes programs for converting UNIX password files to the shadow password format, plus programs for...
[RHSA-2003:057-06] Updated shadow-utils packages fix exposure
--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated shadow-utils packages fix exposure Advisory ID: RHSA-2003:057-06 Issue date: 2003-02-12 Updated on: 2003-02-18 Product: Red Hat Linux Keywords: mail mailspool Cross...