Debian xmcd不安全临时文件建立漏洞

BUGTRAQ ID: 32288 CVE ID：CVE-2008-4994 CNCVE ID：CNCVE-20084994 Debian是一款linux发行版本。 Debian 'xmcd'不安全建立临时文件，本地攻击者可以利用漏洞破坏系统文件，造成拒绝服务攻击。 问题是在/tmp目录中不安全建立临时文件，通过符号链接可以用户进程权限覆盖目标系统文件，造成拒绝服务，也可能导致特权提升。 Debian xmcd 2.6 -19.3 升级到最新版本： http://packages.debian.org/lenny/xmcd...

pppblog-disclose.txt

pppBlog = 0.3.11 randompic.php System File Disclosure Vulnerability url: http://sourceforge.net/projects/pppblog/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Auth...

pppBlog 0.3.11 - File Disclosure

pppBlog 0.3.11 - File Disclosure pppBlog = 0.3.11 randompic.php System File Disclosure Vulnerability url: http://sourceforge.net/projects/pppblog/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational...

Epic Games Unreal Tournament 3 UT3 WebAdmin目录遍历漏洞

BUGTRAQ ID: 31272 CNCAN ID：CNCAN-2008092305 Unreal Tournament 3 UT3是一款基于Unreal引擎的游戏程序，包含内部WEB服务程序。 Unreal Tournament 3 UT3包含的管理员接口不正确过滤用户输入，远程攻击者可以利用漏洞以WEB权限查看web root外的文件内容。 提交类似如下的请求，可绕过WEB ROOT限制，以WEB权限查看系统文件内容： GET /images/../../UTGame/Config/UTGame.INI HTTP/1.0 Host: localhost Epic Games UT3...

Amarok 'MagnatuneBrowser::listDownloadComplete()'不安全临时文件建立漏洞

BUGTRAQ ID: 30662 CNCAN ID：CNCAN-2008081412 Amarok是一款Linux/Unix平台下的音乐播放器。 Amarok不安全处理临时文件，本地攻击者可以利用漏洞通过符号链接攻击破坏系统文件。 问题存在于'MagnatuneBrowser::listDownloadComplete'函数中，由于不安全建立临时文件，攻击者通过符号链接以用户进程权限覆盖系统的任意文件，造成拒绝服务或特权提升。 Amarok 1.4.9 1 目前没有解决方案提供： http://amarok.kde.org/...

CMS little (index.php template) Local File Inclusion Vulnerability

No description provided by source. ====================================================================== CMS little index.php template Local File Inclusion Vulnerability ====================================================================== ,--^----------,--------,-----,-------^--, | |||||||||...

CMS little (index.php template) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== CMS little index.php template Local File Inclusion Vulnerability ================================================================== ,--^----------,--------,-----,-------^--...

Galmeta Post CMS 0.2 Multiple Local File Inclusion Vulnerabilities

No description provided by source. ================================================================== Galmeta Post CMS Multiple Local File Inclusion Vulnerabilities ================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' |...

Keller Web Admin CMS 0.94 Pro Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================ Keller Web Admin CMS 0.94 Pro Local File Inclusion Vulnerability ================================================================ ,--^----------,--------,-----,-------^--, |...

Keller Web Admin CMS 0.94 Pro - Local File Inclusion (1)

Keller Web Admin CMS 0.94 Pro - Local File Inclusion 1 =========================================================== Keller Web Admin CMS Local File Inclusion Vulnerability =========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | ...

ThaiQuickCart 3 - sLanguage Cookie Local File Inclusion

ThaiQuickCart 3 - sLanguage Cookie Local File Inclusion ===================================================================== ThaiQuickCart COOKIE:sLanguage Local File Inclusion Vulnerability =====================================================================...

ThaiQuickCart (sLanguage) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ ThaiQuickCart sLanguage Local File Inclusion Vulnerability ============================================================ ,--^----------,--------,-----,-------^--, | |||||||||...

thaiquickcart-lfi.txt

===================================================================== ThaiQuickCart COOKIE:sLanguage Local File Inclusion Vulnerability ===================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...

facilcms-lfi.txt

======================================================= Facil-CMS 0.1RC Local File Inclusion Vulnerabilities ======================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Facil-CMS 0.1RC - Multiple Local File Inclusions

Facil-CMS 0.1RC - Multiple Local File Inclusions ======================================================= Facil-CMS 0.1RC Local File Inclusion Vulnerabilities ======================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

Facil-CMS 0.1RC - Multiple Local File Inclusions

======================================================= Facil-CMS 0.1RC Local File Inclusion Vulnerabilities ======================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

FOG Forum 0.8.1 - Multiple Local File Inclusions

======================================================= FOG Forum 0.8.1 Local File Inclusion Vulnerabilities ======================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

FOG Forum 0.8.1 - Multiple Local File Inclusions

FOG Forum 0.8.1 - Multiple Local File Inclusions ======================================================= FOG Forum 0.8.1 Local File Inclusion Vulnerabilities ======================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

fogforum-lfi.txt

======================================================= FOG Forum 0.8.1 Local File Inclusion Vulnerabilities ======================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

FOG Forum 0.8.1 Multiple Local File Inclusion Vulnerabilities

No description provided by source. ======================================================= FOG Forum 0.8.1 Local File Inclusion Vulnerabilities ======================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Te...