SquirrelMail 3.1 - Change Passwd Plugin Local Buffer Overflow

SquirrelMail 3.1 - Change Passwd Plugin Local Buffer Overflow / Change passwd 3.1 SquirrelMail plugin Coded by rod hedor web-- http://lezr.com local exploit Multiple buffer overflows are present in the handling of command line arguements in chpasswd. The bug allows a hacker to exploit the process...

SquirrelMail 3.1 Change Passwd Plugin Local Buffer Overflow Exploit

Exploit for linux platform in category local exploits =================================================================== SquirrelMail 3.1 Change Passwd Plugin Local Buffer Overflow Exploit =================================================================== / Change passwd 3.1 SquirrelMail plugin...

SquirrelMail Web mail Change Passwd plugin buffer overflow

Buffer overflow on parsing command line arguments...

SquirrelMail 3.1 - Change Passwd Plugin Local Buffer Overflow

/ Change passwd 3.1 SquirrelMail plugin Coded by rod hedor web-- http://lezr.com local exploit Multiple buffer overflows are present in the handling of command line arguements in chpasswd. The bug allows a hacker to exploit the process to run arbitrary code. / include include const char...

CVE-2006-0331

Buffer overflow in Change passwd 3.1 chpasswd SquirrelMail plugin allows local users to execute arbitrary code via long command line arguments...

linux/x86 Adduser without Password to /etc/passwd 59 bytes

linux/x86 Adduser without Password to /etc/passwd 59 bytes. Shellcode exploit for linx86 platform / linux/x86 adds user 'xtz' without password to /etc/passwd - 59 bytes - izik / char shellcode = "\x6a\x05" // push $0x5 // // : // "\x58" // pop %eax "\x99" // cltd "\x31\xc9" // xor %ecx,%ecx...

CVE-2006-0331: Undefined Security Weakness

Buffer overflow in Change passwd 3.1 chpasswd SquirrelMail plugin allows local users to execute arbitrary code via long command line arguments...

CVE-2006-0331

Buffer overflow in Change passwd 3.1 chpasswd SquirrelMail plugin allows local users to execute arbitrary code via long command line arguments...

CVE-2006-0331

The CVE-2006-0331 vulnerability affects the Change passwd 3.1 (chpasswd) SquirrelMail plugin, where a buffer overflow allows a local user to potentially execute arbitrary code by supplying long command line arguments. The issue is documented in NVD as a buffer overflow in the SquirrelMail plugin,...

linux/x86 Adduser without Password to /etc/passwd 59 bytes

No description provided by source. / linux/x86 adds user 'xtz' without password to /etc/passwd - 59 bytes - izik [email protected] / char shellcode = "\x6a\x05" // push $0x5 // // exit: // "\x58" // pop %eax "\x99" // cltd "\x31\xc9" // xor %ecx,%ecx "\x66\xb9\x01\x04" // mov $0x401,%cx "\x52" // pu...

phpXplorer file inclusion

site:www.phpxplorer.org ------------------------------------------------ http://victim/folder/system/action.php?sShare=guest&sAction=../../../../../../../../../../../../etc/passwd00 ------------------------------------------------- example:...

Ubuntu 4.10 : passwd vulnerabilities (USN-17-1)

Martin Schulze and Steve Grubb discovered a flaw in the authentication input validation of the 'chfn' and 'chsh' programs. This allowed logged in users with an expired password to change their real name and their login shell without having to change their password. This flaw cannot lead to...

Avotus mm File Retrieval attempt

The script attempts to force the remote Avotus CDR mm service to include the file /etc/passwd across the network. OpenVAS Vulnerability Test $Id: avotusmm.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Avotus mm File Retrieval attempt Authors: Anonymous Copyright: Copyright C 2004 Anonymous...

CVSTrac CVSROOT/passwd arbitrary account deletion

The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version of CVSTRAC is vulnerable to a flaw wherein a remote attacker can overwrite a critical file, thereby giving them elevated access and potentially control over other user accounts...

CVE-2005-3289

LSCFG in IBM AIX 5.2 and 5.3 does not create temporary files securely, which allows local users to corrupt /etc/passwd and possibly other system files via the trace file...

CVE-2005-3289

LSCFG in IBM AIX 5.2 and 5.3 does not create temporary files securely, which allows local users to corrupt /etc/passwd and possibly other system files via the trace file...

CVE-2004-2394

Off-by-one error in passwd 0.68 and earlier, when using the --stdin option, causes passwd to use the first 78 characters of a password instead of the first 79, which results in a small reduction of the search space required for brute force attacks...

CVE-2004-2396

passwd 0.68 does not check the return code for the pamstart function, which has unknown impact and attack vectors that may prevent "safe and proper operation" of PAM...

CVE-2004-2396

The CVE-2004-2396 issue concerns passwd 0.68 failing to check the return code from pam_start, per Mandrake MDKSA-2004:045. This indicates a potential risk in PAM initialization that could affect safe and proper operation; exact impact is not quantified in the documents. The connected advisory not...

CVE-2004-2394

CVE-2004-2394 affects the passwd program (versions 0.68 and earlier). The root cause is an off-by-one error in the --stdin path, causing passwords to be truncated to the first 78 characters instead of 79, which reduces the brute-force search space. Remediation appears in connected advisories: Man...