Очередные дырки в различных Shopping Cart

Обратный путь в директориях позволяет обращаться к системным файлам. В отдельных случаях возможна модификация прайса...

Дырка в diskcheck

Некорректная работа с временными файлами позволяет переписать любой системный файл с помощью символьных линков...

iXsecurity.20001107.compaq-wbm.a

iXsecurity Security Vulnerability Report No: iXsecurity.20001107.compaq-wbm.a ==================================== Vulnerability Summary --------------------- Problem: The default installation of Compaq Web-Based Management on a Netware server reveals sensitive system files Threat: Anyone that ha...

Unsafe passing of variables to mailform.pl in MailForm V2.0

Title: Unsafe passing of variables to mailform.pl in MailForm V2.0 For Unix or NT Advisory Author: Karl Hanmore [email protected] Script URL: http://rlaj.com/scripts/mailform Script Author: Ranson Johnson Advisory Released: 11 September 2000 Vendor notified: [email protected] 05 Sept...

Дырка во многих реализациях PHP

Из-за того, что сервер не сбрасывает некоторые переменные, которые могут задаваться пользователем, пользователь может указать временный файл, используемый при загрузке, что позволяет скомпрометировать системные файлы...

AT Computing atsar_linux 1.4 - File Manipulation

source: https://www.securityfocus.com/bid/1048/info atsar is a linux load monitoring software package released under the GPL by AT Computing. atsadc is a setuid root binary that is included in the atsar package. atsadc is setuid because it obtains informatin via /dev/kmem. atsadc will accept as a...

[SECURITY] New versions of man2html fixes postinst glitch

Former versions of man2html uses a static file in /tmp for writing. This can lead into overwriting system files if a malicious user has created a symbolic link to it before upgrading man2html. We recommend you upgrade your man2html package as soon as possible. wget url will fetch the file for you...

aix.enetwork.firewall.txt

Date: Tue, 25 May 1999 20:33:53 +0100 From: Paul Cammidge To: [email protected] Subject: IBM eNetwork Firewall for AIX The IBM eNetwork Firewall for AIX contains some poorly written scripts, which create temporary files in /tmp without making any attempt to validate the existance of the file...

domino-notes.txt

''''''''''''''''''''''''''''''''''''' L0pht Security Advisory URL Origin: http://www.l0pht.com/advisories.html Release Date: July 31, 1998 Application: Notes 4.6+ Client Operating Sys: Any Severity: Users can overwrite/create system files Author: nny Patch Status: Lotus has been made aware of thi...