CVE-2009-0122

hplip.postinst in HP Linux Imaging and Printing HPLIP 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary files via unspecified manipulations in advance of an HPLIP installation or upgrade by an administrator, related to the product's attempt to correct the ownership...

Design/Logic Flaw

hplip.postinst in HP Linux Imaging and Printing HPLIP 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary files via unspecified manipulations in advance of an HPLIP installation or upgrade by an administrator, related to the product's attempt to correct the ownership...

CVE-2009-0122

hplip.postinst in HP Linux Imaging and Printing HPLIP 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary files via unspecified manipulations in advance of an HPLIP installation or upgrade by an administrator, related to the product's attempt to correct the ownership...

CVE-2009-0122

hplip.postinst in HP Linux Imaging and Printing HPLIP 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary files via unspecified manipulations in advance of an HPLIP installation or upgrade by an administrator, related to the product's attempt to correct the ownership...

CVE-2009-0122

hplip.postinst in HP Linux Imaging and Printing HPLIP 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary files via unspecified manipulations in advance of an HPLIP installation or upgrade by an administrator, related to the product's attempt to correct the ownership...

CVE-2009-0122

CVE-2009-0122 affects HP Linux Imaging and Printing (HPLIP) 2.7.7 and 2.8.2 on Ubuntu. The vulnerability lies in hplip.postinst, where local users can change the ownership of arbitrary files through manipulations performed before an HPLIP installation or upgrade by an administrator. This is relat...

Debian GNU/Linux (symlink attack in login) Arbitrary File Ownership PoC

No description provided by source. !/bin/bash - echo ' include string.h include stdlib.h include unistd.h include utmp.h include sys/types.h include stdio.h int mainint argc, char argv struct utmp entry; int i; entry.uttype=LOGINPROCESS; strcpyentry.utline,"/tmp/x"; entry.uttime=0;...

Debian GNU/Linux (symlink attack in login) Arbitrary File Ownership PoC

Exploit for linux platform in category local exploits ======================================================================= Debian GNU/Linux symlink attack in login Arbitrary File Ownership PoC ======================================================================= !/bin/bash - echo ' include...

Debian GNU/Linux (symlink attack in login) Arbitrary File Ownership PoC

No description provided by source. !/bin/bash - echo ' include string.h include stdlib.h include unistd.h include utmp.h include sys/types.h include stdio.h int mainint argc, char argv struct utmp entry; int i; entry.uttype=LOGINPROCESS; strcpyentry.utline,"/tmp/x"; entry.uttime=0;...

Debian - Symlink In Login Arbitrary File Ownership

!/bin/bash - echo ' include include include include include include int mainint argc, char argv struct utmp entry; int i; entry.uttype=LOGINPROCESS; strcpyentry.utline,"/tmp/x"; entry.uttime=0; strcpyentry.utuser,"badguy"; strcpyentry.uthost,"badhost"; entry.utaddr=0; fori=1;i /tmp/fillutmp.c cc ...

Debian - Symlink In Login Arbitrary File Ownership

Debian - Symlink In Login Arbitrary File Ownership !/bin/bash - echo ' include include include include include include int mainint argc, char argv struct utmp entry; int i; entry.uttype=LOGINPROCESS; strcpyentry.utline,"/tmp/x"; entry.uttime=0; strcpyentry.utuser,"badguy";...

condor: users can run jobs with arbitrary owners

Unspecified vulnerability in Condor before 7.0.5 allows attackers to execute jobs as other users via unknown vectors...

Gentoo Security Advisory GLSA 200808-12 (postfix)

The remote host is missing updates announced in advisory GLSA 200808-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200411-26 (GIMPS, SETI@home, ChessBrain)

The remote host is missing updates announced in advisory GLSA 200411-26. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200504-12 (rsnapshot)

The remote host is missing updates announced in advisory GLSA 200504-12. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200408-15 (tomcat)

The remote host is missing updates announced in advisory GLSA 200408-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200411-26 (GIMPS,SETI@home,ChessBrain)

The remote host is missing updates announced in advisory GLSA 200411-26. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-4018

swcons in bos.rte.console in IBM AIX 5.2.0 through 6.1.1 allows local users in the system group to create or overwrite an arbitrary file, and establish weak permissions and root ownership for this file, via unspecified vectors. NOTE: this can be leveraged to gain privileges. NOTE: this issue exis...

DEBIAN-CVE-2008-3970

pammount 0.10 through 0.45, when luserconf is enabled, does not verify mountpoint and source ownership before mounting a user-defined volume, which allows local users to bypass intended access restrictions via a local mount...

Design/Logic Flaw

swcons in bos.rte.console in IBM AIX 5.2.0 through 6.1.1 allows local users in the system group to create or overwrite an arbitrary file, and establish weak permissions and root ownership for this file, via unspecified vectors. NOTE: this can be leveraged to gain privileges. NOTE: this issue exis...