8798 matches found
Solaris 2.7/2.8 Catman - Local Insecure tmp Symlink
!/usr/local/bin/perl -w The problem is catman creates files in /tmp insecurly. They are based on the PID of the catman process, catman will happily clobber any files that are symlinked to that file. The idea of this script is to create a block of symlinks to the target file with the current PID a...
[SECURITY] [DSA-004-1] nano symlink attack
Package : nano Problem type : symlink attack Debian-specific: no The problem that was previously reported for joe also occurs with other editors. When nano a free pico clone unexpectedly dies it tries a warning message to a new file with a predictable name the name of the file being edited with...
Symlink attack in (all?) Samba. - Local root walkthrough by Tozz
Symlink attack in all? Samba. - Local root walkthrough by Tozz ================================================================= Requirements: Shell access or any other way to create symlinks A running samba deamon The username and/or password of a user named in the admin lists in one or more...
mon_pine.sh
Hacksware Bug Report 1. Name: Pine temporary file hijacking vulnerability 2. Release Date: 2000.12.11 3. Affected Application: Pine Version 4.30or maybe other versions 4. Author: [email protected] 5. Type: Local Race Condition 6. Explanation If pine setting is like following: x...
[SECURITY] [DSA-001-1] ed symlink attack
-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------------ Debian Security Advisory 001-1 [email protected] http://www.debian.org/security/ Wichert Akkerman November 29, 2000 -...
[SECURITY] [DSA-002-1] fsh symlink attack
-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------------ Debian Security Advisory DSA-002-1 [email protected] http://www.debian.org/security/ Wichert Akkerman November 30, 2000 -...
[SECURITY] [DSA-003-1] Revised security fix for joe
Package : joe Problem type : symlink attack Debian-specific: no The security fix for joe released on November 22, 2000 had a problem: it created the DEADJOE file securily but didnt write anything to it. This has been fixed in version 2.8.15.2 . This is the text from the previous advisory: When jo...
[SECURITY] [DSA-002-1] fsh symlink attack
Package : fsh Problem type : symlink attack Debian-specific: no Colin Phipps found an interesting symlink attack problem in fsh a tool to quickly run remote commands over rsh/ssh/lsh. When fshd starts it creates a directory in /tmp to hold its sockets. It tries to do that securely by checking of ...
[SECURITY] [DSA-001-1] ed symlink attack
Package : ed Problem type : symlink attack Debian-specific: no Alan Cox discovered that GNU ed a classed line editor tool created temporary files unsafely. This has been fixed in version 0.2-18.1. wget url will fetch the file for you dpkg -i file.deb will install the referenced file. Debian...
Security Update: bash creates insecure temp files
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Caldera Systems, Inc. Security Advisory Subject: bash creates insecure temp files Advisory number: CSSA-2000-042.0 Issue date: 2000 November, 24 Cross reference: 1. Problem Description Bash creates temp files for here scripts insecurely. This can be...
[SECURITY] New version of joe released
Package : joe Problem type : symlink attack Debian-specific: no When joe Joes Own Editor dies due to a signal instead of a normal exit it saves a list of the files it is editing to a file called DEADJOE in its current directory. Unfortunately this wasnt done safely which made joe vulnerable to a...
[SECURITY] New version of ghostscript released
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman November 23, 2000 - ------------------------------------------------------------------------ Package : gs Problem type : symlink...
[SECURITY] New version of joe released
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman November 22, 2000 - ------------------------------------------------------------------------ Package : joe Problem type : symlink...
CVE-2000-0864
Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of arbitrary files and directories, and gain additional privileges, via a symlink attack...
CVE-2000-0724
The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various files in /tmp, including uudecode, snarf, and some installer files...
CVE-2000-0694
pgxconfig in the Raptor GFX configuration tool allows local users to gain privileges via a symlink attack...
CVE-2000-0031
The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack...
CVE-2000-0702
The net.init rc script in HP-UX 11.00 S008net.init allows local users to overwrite arbitrary files via a symlink attack that points from /tmp/stcp.conf to the targeted file...
CVE-2000-0691
The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.lastrun to the target file...