3562 matches found
Mandrake Linux Security Advisory : shadow-utils (MDKSA-2001:007)
WireX discovered a potential temporary file race condition in the useradd program contained in the shadow-utils package. The useradd program creates it's temporary files in the protected directory /etc/default, but if this directory is changed to world-writable, a problem could occur. This update...
Apple Quicktime plugin - Windows 4.1.2 (Japanese) Remote Overflow Vulnerability
Exploit for windows platform in category remote exploits source: http://www.securityfocus.com/bid/2328/info Apple Quicktime plugin for Windows is vulnerable to a remote buffer overflow. A maliciously-constructed web link statement in a remote HTML document, which contains excess data argumenting ...
Apple QuickTime plugin - Windows 4.1.2 (Japanese) Remote Overflow
Apple QuickTime plugin - Windows 4.1.2 Japanese Remote Overflow source: https://www.securityfocus.com/bid/2328/info Apple Quicktime plugin for Windows is vulnerable to a remote buffer overflow. A maliciously-constructed web link statement in a remote HTML document, which contains excess data...
Apache QPID NullAuthenticator验证绕过漏洞
Bugtraq ID:54954 CVE ID:CVE-2012-3467 Apache Qpid Open Source AMQP Messaging是一个跨平台的企业通讯解决方案，实现了高级消息队列协议。 Apache Qpid C++库实现存在安全缺陷，允许在影子链接shadow connections中使用NullAuthenticator机制进行验证，导致AMQP客户端应用绕过验证访问broker。 0 bitcoind/Bitcoin-Qt 0.3.11之前版本 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息：...
Linux x86 - chmod 666 /etc/passwd & /etc/shadow 57 bytes
Linux x86 - chmod 666 /etc/passwd & /etc/shadow 57 bytes. Shellcode exploit for linx86 platform / Title: Linux x86 chmod 666 /etc/passwd & /etc/shadow - 57 bytes Author: Jean Pascal Pereira Web: http://0xffe4.org Disassembly of section .text: 08048060 : 8048060: 31 c0 xor %eax,%eax 8048062: 66 b9...
Scientific Linux Security Update : shadow-utils on SL3.x i386/x86_64
A flaw was found in the useradd tool in shadow-utils. A new user's mailbox, when created, could have random permissions for a short period. This could allow a local attacker to read or modify the mailbox. CVE-2006-1174 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C...
linux/x86 - execve(/bin/cat, /etc/shadow, NULL) - 42 bytes
/ Title: linux/x86 execve/bin/cat, /etc/shadow, NULL - 42 bytes Type: Shellcode Author: antrhacks Platform: Linux X86 / / ASSembly 31 c0 xor %eax,%eax 50 push %eax 68 2f 63 61 74 push $0x7461632f 68 2f 62 69 6e push $0x6e69622f 89 e3 mov %esp,%ebx 50 push %eax 68 61 64 6f 77 push $0x776f6461 68 2...
Scientific Linux Security Update : shadow-utils on SL4.x i386/x86_64
A flaw was found in the useradd tool in shadow-utils. A new user's mailbox, when created, could have random permissions for a short period. This could allow a local attacker to read or modify the mailbox. CVE-2006-1174 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C...
linux/x86 - chmod 666 /etc/passwd & /etc/shadow - 57 bytes
/ Title: Linux x86 chmod 666 /etc/passwd & /etc/shadow - 57 bytes Author: Jean Pascal Pereira Web: http://0xffe4.org Disassembly of section .text: 08048060 : 8048060: 31 c0 xor %eax,%eax 8048062: 66 b9 b6 01 mov $0x1b6,%cx 8048066: 50 push %eax 8048067: 68 73 73 77 64 push $0x64777373 804806c: 68...
Kindle Touch a remote code execution vulnerability-vulnerability warning-the black bar safety net
I don't know if amazon kindle fans? Recent foreign media reports, the Kindle Touch appears a remote executable code vulnerabilities. For Kindle Touch 5.1.0 firmware version, you can remotely execute code, The/etc/shadow file is sent to the specifiedweb server. Vulnerability relates to...
freeradius: does not respect expired passwords when using the unix module
modules/rlmunix/rlmunix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password...
Shadow Stream Recorder 3.0.1.7 Buffer Overflow
Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
Shadow Stream Recorder 3.0.1.7 Buffer Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Shadow Stream...
Shadow Stream Recorder 3.0.1.7 - Local Buffer Overflow (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Shadow Stream...
Shadow Stream Recorder 3.0.1.7 Buffer Overflow
This module exploits a buffer overflow in Shadow Stream Recorder 3.0.1.7. Using the application to open a specially crafted asx file, a buffer overflow may occur to allow arbitrary code execution under the context of the user. This module requires Metasploit: https://metasploit.com/download Curre...
Play [EX] 2.1 - .M3U.PLS.LST Playlist File Denial of Service
Play EX 2.1 - .M3U.PLS.LST Playlist File Denial of Service !/usr/bin/perl Play EX 2.1 Playlist File M3U/PLS/LST DoS Exploit Exploit discovered and coded by Death Shadow Dark Tested on Windows 7 Pro 64 bit and Windows XP SP3 Pro Sofware Link http://www.nautrup.com/pex/PlayEXPlayer.html...
Oracle Exadata Infiniband Switch default logins and world readable shadow file
Oracle Exadata Infiniband Switch default logins and world readable shadow file Hi Bugtraq List, I've noticed a minor issue with the 1/4 rack Oracle Exadata Solution. What is Exadata? From Oracle.com "Oracle Exadata is the only database machine that provides extreme performance for both data...
Oracle Exadata Infiniband Switch Default Logins / Poor Configuration
Oracle Exadata Infiniband Switch default logins and world readable shadow file Hi Full-Disclosure List, I've noticed a minor issue with the 1/4 rack Oracle Exadata Solution. What is Exadata? From Oracle.com "Oracle Exadata is the only database machine that provides extreme performance for both da...
#WikiLeaks publishes millions of Hacked Stratfor E-mails #gifiles
WikiLeaks publishes millions of Hacked Stratfor E-mails gifiles WikiLeaks today began publishing more than five million confidential e-mails from US-based Intelligence firm Stratfor. About 5.5m emails obtained from the servers of Stratfor, a US-based intelligence gathering firm with about 300,000...