CVE-2008-2324

The Repair Permissions tool in Disk Utility in Apple Mac OS X 10.4.11 adds the setuid bit to the emacs executable file, which allows local users to gain privileges by executing commands within emacs...

CVE-2008-2324

The Repair Permissions tool in Disk Utility in Apple Mac OS X 10.4.11 adds the setuid bit to the emacs executable file, which allows local users to gain privileges by executing commands within emacs...

CVE-2008-2324

CVE-2008-2324 affects Apple Mac OS X (Disk Utility’s Repair Permissions tool). The vulnerability arises when Repair Permissions runs and incorrectly adds the setuid bit to /usr/bin/emacs, enabling a local attacker to execute commands as root by invoking emacs. This is a local privilege-escalation...

repaironline-admin.txt

/ | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title :: Repair Online v1.2 sentout Create Admin...

Repair Online v1.2 (sentout) Create Admin Vulnerability

/ | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title :: Repair Online v1.2 sentout Create Admin...

Fedora 8 : cacti-0.8.7b-1.fc8 (2008-1699)

Fixes: XSS vulnerabilities Path disclosure vulnerabilities SQL injection vulnerabilities HTTP response splitting vulnerabilities bug0000855: Unnecessary and faulty DEF generation for CF:AVERAGE bug0001083: Small visual fix for Cacti in 'View Cacti Log File' bug0001089: Graph xport modification to...

Code injection

Unspecified vulnerability in PHPDevShell before 0.7.0 has unknown impact and attack vectors, involving a "minor security bug in repair & optimize database."...

CVE-2007-6186

Unspecified vulnerability in PHPDevShell before 0.7.0 has unknown impact and attack vectors, involving a "minor security bug in repair & optimize database."...

Easily crack open the Lost Password laptop-vulnerability warning-the black bar safety net

For laptops, it is best not easily set a password, because the laptop's boot password is not like a PC that stored in CMOS circuit can through the discharge clear, at the moment a new laptop is the password stored on the motherboard of the few pieces of logic circuits, we personally are unable to...

MOAB-15-01-2007.rb.txt

!/usr/bin/ruby Exploit for MOAB-15-01-2007 c 2006 LMH . Note: It's a generic exploit, you can use it over any binary writable which is set as root setuid by diskutil repair permissions. Simply change the path. Blame Apple for doing such a piece of and relying on flawed DAC. Line-noise: Jackass of...

CVE-2007-0345

The 1 Activity Monitor.app/Contents/Resources/pmTool, 2 Keychain Access.app/Contents/Resources/kcproxy, and 3 ODBC Administrator.app/Contents/Resources/iodbcadmintool programs in /Applications/Utilities/ in Mac OS X 10.4.8 have weak permissions writable by admin group, which allows local admin...

MOAB-05-01-2007: Apple DiskManagement BOM Local Privilege Escalation Vulnerability

Summary Apple DiskManagement.framework is the back-end for the ' diskutil' tool, used to perform disk/file system maintenance tasks. One of these tasks, permissions repair, involves the usage of BOM Bill Of Materials files, which declare the default file permissions and owner among other...

Mac OS X 10.4.8 DiskManagement BOM (cron) Privilege Escalation Exploit

Exploit for macOS platform in category local exploits ====================================================================== Mac OS X 10.4.8 DiskManagement BOM cron Privilege Escalation Exploit ====================================================================== !/usr/bin/ruby c 2006 LMH code...

Apple Mac OSX 10.4.8 - DiskManagement BOM Privilege Escalation

!/usr/bin/ruby c 2006 LMH Kevin Finisterre Thanks to The French Connection for bringing this in-the-wild 0-day to our attention. If /tmp/ps2 exists on your system, you've been pwned already. Thanks to the original authors of the exploit 'meow'. You know who you are. "They did it for the lulz" - A...

Cyber thieves ten trick-vulnerability warning-the black bar safety net

Peeping five formula One, you enter the account number when not found behind the eye, someone secretly took down your account. Second, you in the cafe Internet, after the Internet leaves a record, someone with the decryption tool will be your password to unscramble it. Third, you go to repair...

ACMS vulnerability-vulnerability warning-the black bar safety net

A few days ago a friend asked me to help him dosecurity testing, his Station is ACMS information distribution system. I to the official down a set of ACMS to study. ACMS front Desk is by the back-end to generate the static page, there is no injection vulnerability. The background comes with the...

Big rookie Qiao take no shell PSINTHK. DLL-vulnerability warning-the black bar safety net

Author:ok-zf source: http://bbs.pysky.net/ early want to have your ownfree kill password stammer with others is not always assured, but the password 结巴 脱壳 后 总是 丢失 PSINTHK.DLL, according to Hui's tutorial to repair password 结巴 的 发信 功能 需要 重新 导入 PSINTHK.DLL so, get free housing PSINTHK. The DLL has...

WinRAR code execution

Undisclosured bug on archive repair...

Medium Risk Vulnerability in WinRAR

Peter Winter-Smith of NGSSoftware has discovered a medium risk vulnerability within the 'Repair Archive' feature in WinRAR. WinRAR versions 3.40 and older are vulnerable to this issue. This vulnerability has now been fixed by RARLabs in WinRAR version 3.41, and a fix can be downloaded from the...

Cisco IBM Director agent does not properly handle arbitrary TCP packets to port 14247/tcp

Overview Cisco IBM Director agent does not properly handle arbitrary TCP packets to port 14247/tcp. Description Cisco voice products e.g. CallManager, IP Interactive Voice Response, IP Call Center Express that run on IBM servers install IBM Director agent to provide administrative management. The...