289 matches found
DEBIAN-CVE-2004-1268
lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors...
CVE-2004-1268
lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors...
linux/x86 add user t00r 82 bytes
No description provided by source. / [email protected] 0x14abril0x7d2 82 bytes Agrega la linea "t00r::0:0::/:/bin/sh" en /etc/passwd Encriptada en http://www.shellcode.com.ar/linux/lnx-t00r-cr1.c / include stdio.h // Shellcode // Asm Code char shellcode= "\x31\xc0" // xorl %eax,%eax "\x50...
linux/x86 add user 104 bytes
Exploit for linux/x86 platform in category shellcode ============================ linux/x86 add user 104 bytes ============================ / Source to this is pass.s This will append a root line to the passwd file see the source. Shok Matt Conover, email protected / char shellcode=...
Mandrake Linux Security Advisory : util-linux (MDKSA-2002:047)
Michal Zalewski found a vulnerability in the util-linux package with the chfn utility. This utility allows users to modify some information in the /etc/passwd file, and is installed setuid root. Using a carefully crafted attack sequence, an attacker can exploit a complex file locking and...
CVS PServer CVSROOT Passwd File Arbitrary Code Execution
According to its version number, the remote CVS server has an arbitrary code execution vulnerability. Any user with the ability to write the CVSROOT/passwd file could execute arbitrary code as root. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11970; scriptversion...
Проблемы с rmuser в FreeBSD (weak permissions)
При изменении passwd-Файлов сначала создается новый файл и лишь потом устанавливаются корректные разрешения...
irix.wu-ftpd.bof.txt
Date: Thu, 20 May 1999 15:00:00 -0700 From: Lance James To: [email protected] Subject: IRIX ftpd overflow Regarding the wu-ftpd buffer overflow, it seems vulnerable in IRIX as well. While testing it, it seemed to have core dumped and dumped the passwd file in there as well, but it's only core...
SGI IRIX 5.3 - 'Cadmin' Local Privilege Escalation
source: https://www.securityfocus.com/bid/335/info A vulnerability exists in the chost and cimport programs, as shipped with SGI's Irix 5.x operating system. chost is part of the Cadmin package. By failing to validate the real userid, these programs allow any user to edit protected files, such as...