CVE-2004-2197

CVE-2004-2197 affects kdocker up to version 0.8. The binary kdocker.cpp fails to properly check file ownership, enabling local users to run arbitrary programs via ownership trust bypass. Affected component: kdocker.cpp in kdocker 0.1–0.8. Root cause: insufficient ownership verification. Impact: l...

CVE-2004-2197

kdocker.cpp in kdocker 0.1 through 0.8 does not properly check the ownership of files, which could allow local users to execute arbitrary programs...

CVE-2004-2197: Undefined Security Weakness

kdocker.cpp in kdocker 0.1 through 0.8 does not properly check the ownership of files, which could allow local users to execute arbitrary programs...

AIX 5.1 Bellmail - Local Race Condition

AIX 5.1 Bellmail - Local Race Condition -bash-2.05b$ -bash-2.05b$ cat xaix5bellmail.pl !/usr/bin/perl FileName: xaix5bellmail.pl Exploit "Race condition vulnerability BUGTRAQ ID: 8805" of /usr/bin/bellmail command on Aix5 to change any file owner to current user. Usage : xaix5bellmail.pl aimfile...

CVE-2005-1177

Unknown vulnerability in 1 Webmin and 2 Usermin before 1.200 causes Webmin to change permissions and ownership of configuration files, with unknown impact...

CVE-2005-1177

CVE-2005-1177 affects Webmin and Usermin prior to 1.200, where an unauthorized access issue may allow modification of configuration file permissions/ownership. The connected Nessus plugin reinforces the exposure as “Webmin

CVE-2005-1177: Undefined Security Weakness

Unknown vulnerability in 1 Webmin and 2 Usermin before 1.200 causes Webmin to change permissions and ownership of configuration files, with unknown impact...

GLSA-200504-12 : rsnapshot: Local privilege escalation

The remote host is affected by the vulnerability described in GLSA-200504-12 rsnapshot: Local privilege escalation The copysymlink subroutine in rsnapshot follows symlinks when changing file ownership, instead of changing the ownership of the symlink itself. Impact : Under certain circumstances,...

rsnapshot: Local privilege escalation

Background rsnapshot is a filesystem snapshot utility based on rsync, allowing local and remote systems backups. Description The copysymlink subroutine in rsnapshot follows symlinks when changing file ownership, instead of changing the ownership of the symlink itself. Impact Under certain...

CVE-2005-1064

The copysymlink function in rsnapshot 1.2.0 and 1.1.x before 1.1.7 changes the ownership of files that a symlink points to rather than the symlink itself, which allows local users to obtain access to arbitrary files...

CVE-2005-1064

CVE-2005-1064 affects rsnapshot 1.2.0 and 1.1.x prior to 1.1.7, where copy_symlink changes ownership of files pointed to by symlinks rather than the symlinks themselves, enabling local users to take ownership of arbitrary files and escalate privileges. Documented impact is local privilege escalat...

CVE-2005-1064

The copysymlink function in rsnapshot 1.2.0 and 1.1.x before 1.1.7 changes the ownership of files that a symlink points to rather than the symlink itself, which allows local users to obtain access to arbitrary files...

CVE-2005-1064: Undefined Security Weakness

The copysymlink function in rsnapshot 1.2.0 and 1.1.x before 1.1.7 changes the ownership of files that a symlink points to rather than the symlink itself, which allows local users to obtain access to arbitrary files...

[Full-disclosure] rsnapshot Security Advisory 001

============================================================================ rsnapshot Security Advisory 001 [email protected] http://www.rsnapshot.org/security/ Apr 10th, 2005 Nathan Rosenquist ============================================================================ Severity: high...

DEBIAN-CVE-2005-1064

The copysymlink function in rsnapshot 1.2.0 and 1.1.x before 1.1.7 changes the ownership of files that a symlink points to rather than the symlink itself, which allows local users to obtain access to arbitrary files...

CVE-2005-1064

The copysymlink function in rsnapshot 1.2.0 and 1.1.x before 1.1.7 changes the ownership of files that a symlink points to rather than the symlink itself, which allows local users to obtain access to arbitrary files...

rsnapshot -- local privilege escalation

An rsnapshot Advisory reports: The copysymlink subroutine in rsnapshot incorrectly changes file ownership on the files pointed to by symlinks, not on the symlinks themselves. This would allow, under certain circumstances, an arbitrary user to take ownership of a file on the main filesystem...

HP-UX PHSS_28099 : HP-UX Running Apache, Increased Privileges or Denial of Service (DoS) or Execution of Arbitrary Code (HPSBUX00224 SSRT2393 rev.3)

s700800 11.04 Virtualvault 4.6 OWS update : Potential vulnerability regarding ownership permissions of System V shared memory based scoreboards. CERT VU825353, CVE CAN-2002-0839 Potential cross-site scripting vulnerability in the default error page when using wildcard DNS. CERT VU240329, CVE...

HP-UX PHSS_28705 : HP-UX Running Apache, Increased Privileges or Denial of Service (DoS) or Execution of Arbitrary Code (HPSBUX00224 SSRT2393 rev.3)

s700800 11.X OV NNM6.2 Intermediate Patch, Feb 2003 : Potential vulnerability regarding ownership permissions of System V shared memory based scoreboards. CERT VU825353, CVE CAN-2002-0839 Potential cross-site scripting vulnerability in the default error page when using wildcard DNS. CERT VU240329...

CVE-2004-2197

kdocker.cpp in kdocker 0.1 through 0.8 does not properly check the ownership of files, which could allow local users to execute arbitrary programs...