CVE-2011-1784

The pidfilewrite function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the 1 keepalived.pid, 2 checkers.pid, and 3 vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files...

keepalived不安全PID文件不安全文件权限漏洞

Bugtraq ID: 47859 keepalived是一个类似于layer3, 4 & 5交换机制的软件，用于检测web服务器的状态。 keepalived启动时会创建666模式的文件： /var/run/checkers.pid /var/run/vrrp.pid /var/run/keepalived.pid /var/run/starter.pid 攻击者可以利用全局可写漏洞结束其他进程，进行拒绝服务攻击。 Keepalived 1.2.2 厂商解决方案 目前没有详细解决方案提供： http://www.keepalived.org/...

kernel: proc: protect mm start_code/end_code in /proc/pid/stat

The dotaskstat function in fs/proc/array.c in the Linux kernel before 2.6.39-rc1 does not perform an expected uid check, which makes it easier for local users to defeat the ASLR protection mechanism by reading the startcode and endcode fields in the /proc//stat file for a process executing a PIE...

CVE-2011-1593

Multiple integer overflows in the nextpidmap function in kernel/pid.c in the Linux kernel before 2.6.38.4 allow local users to cause a denial of service system crash via a crafted 1 getdents or 2 readdir system call...

USN-1113-1: Postfix vulnerabilities

It was discovered that the Postfix package incorrectly granted write access on the PID directory to the postfix user. A local attacker could use this flaw to possibly conduct a symlink attack and overwrite arbitrary files. This issue only affected Ubuntu 6.06 LTS and 8.04 LTS. CVE-2009-2939 Wiets...

Sql injection

SQL injection vulnerability in ICloudCenter ICJobSite 1.1 allows remote attackers to execute arbitrary SQL commands via the pid parameter to an unspecified component, a different vulnerability than CVE-2011-1546. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2011-1557: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ICloudCenter ICJobSite 1.1 allows remote attackers to execute arbitrary SQL commands via the pid parameter to an unspecified component, a different vulnerability than CVE-2011-1546. NOTE: the provenance of this information is unknown; the details are obtained solely...

PT-2011-3214

Name of the Vulnerable Software and Affected Versions ICloudCenter ICJobSite version 1.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the pid parameter to an unspecified component. Recommendations For ICloudCenter ICJobSite version 1.1, avo...

SnapProof - 'page.php' SQL Injection

SnapProof page.php Sql Injection Vulnerability ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://www.snapproof.com/ .:. Dork : "Created and powered by SnapProof" === Exploit === www.site.com/page.php?pID=nullSql...

Directory traversal

The setup scripts in 389 Directory Server 1.2.x aka Red Hat Directory Server 8.2.x, when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users to cause a denial of service daemon outage or arbitrary process termination by...

PT-2011-2020

Name of the Vulnerable Software and Affected Versions 389 Directory Server versions 1.2.x Description The issue allows local users to cause a denial of service, potentially leading to daemon outage or arbitrary process termination, by replacing PID files in the /var/run/dirsrv directory. This is...

CVE-2011-0022: Undefined Security Weakness

The setup scripts in 389 Directory Server 1.2.x aka Red Hat Directory Server 8.2.x, when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users to cause a denial of service daemon outage or arbitrary process termination by...

Server: insecure pid file directory permissions

The setup scripts in 389 Directory Server 1.2.x aka Red Hat Directory Server 8.2.x, when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users to cause a denial of service daemon outage or arbitrary process termination by...

RHEL 4 : bash (RHSA-2011:0261)

Updated bash packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

Low: Red Hat Security Advisory: bash security and bug fix update

Updated bash packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

kernel: tty: release_one_tty() forgets to put pids

The releaseonetty function in drivers/char/ttyio.c in the Linux kernel before 2.6.34-rc4 omits certain required calls to the putpid function, which has unspecified impact and local attack vectors...

SnapProof SQL Injection

Exploit Title: SnapProof SQL Injection Vulnerability Date: 29th july 2010 Author: Dinesh Arora Critical:high Product : Commercial Sample Affected Parameter: pID contact: [email protected] Greetz to :b0nd, Fbih2s,Beenu,Charles ,j4ckh4x0r, punter,eberly Shoutz to : http://www.garage4hackers.co...

MDVA-2010:148 : msec

This update fixes a number of issues in msec: - this update fixes incorrect German localization for msecperms messages bug 51005 - this update allows to import legacy perm.local permissions configuration file, which could be installed by third-party applications - this update fixes a crash when...

CVE-2010-2694: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the redSHOP Component comredshop 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the pid parameter to index.php...

Debian Security Advisory DSA 2054-2 (bind9)

The remote host is missing an update to bind9 announced via advisory DSA 2054-2. OpenVAS Vulnerability Test $Id: deb20542.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2054-2 bind9 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...