Дырка в sash в Debian

При копировании /etc/shadow создаются файлы открытые на чтение...

CVE-2000-0749: Undefined Security Weakness

Buffer overflow in the Linux binary compatibility module in FreeBSD 3.x through 5.x allows local users to gain root privileges via long filenames in the linux shadow file system...

[SECURITY] New version of xlockmore/xlockmore-gl released

Package: xlockmore, xlockmore-gl Vulnerability type: local exploit Debian-specific: no There is a format string bug in all versions of xlockmore/xlockmore-gl. Debian 2.1 slink installs xlock setgid by default, and this exploit can be used to gain read access to the shadow file. We recommend...

[SECURITY] New version of xlockmore/xlockmore-gl released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Michael Stone August 16, 2000 - ------------------------------------------------------------------------ Package: xlockmore, xlockmore-gl...

fingerd

I am new on the list so i dont know if you knew that. On Irix 6.4 with all patches installed the fingerd seems to like to display the shadow file to all users. ln -s /etc/shadow /path/user/.plan finger [email protected] This feature was found by a student -Zanikolas Serafim- while he was...

pam_unix_passwd.so.txt

Date: Wed, 23 Dec 1998 13:12:45 +0100 From: Michal Zalewski Reply-To: Bugtraq List To: [email protected] Subject: Linux PAM up to 0.64-2 local root compromise As someone said, "Never make any mistaeks." Latest release of Linux Pluggable Authentication Modules pam-0.64-2, as well as previous...

PT-1999-1292 · Caldera · Caldera Open Administration System

Name of the Vulnerable Software and Affected Versions: Caldera Open Administration System COAS affected versions not specified Description: A vulnerability in Caldera Open Administration System COAS allows the /etc/shadow password file to be made world-readable. Recommendations: At the moment,...

Resolv+ (RESOLV_HOST_CONF) Linux Library Local Exploit

Exploit for linux platform in category local exploits ====================================================== Resolv+ RESOLVHOSTCONF Linux Library Local Exploit ====================================================== setenv RESOLVHOSTCONF /etc/shadow; ping adfas 0day.today 2018-02-18...