2219 matches found
AFS Client Version Detection
This detects the AFS client version by connecting to the AFS callback port and processing the buffer received. The client version gives potential attackers additional information about the system they are attacking. Versions and types should be ommited where possible. This script was written by...
BRU Vulnerability
BRU backup software Vulnerability: Description: You can change the log file BRU uses by changing the BRUEXECLOG environment variable. Since bru is setuid root you can append to any file on the system. Exploitation: $ BRUEXECLOG=/etc/passwd $ export BRUEXECLOG $ bru -V ' comsec::0:0::/:/bin/sh ' $...
CVE-1999-0696
Buffer overflow in CDE Calendar Manager Service Daemon rpc.cmsd...
Пользователь может удалить файлы в SuSE Linux
При автоматическом удалении временных файлов MAXDAYSINTMP 0 некорректно обрабатывается пробел в имени файла, что позволяет пользователю инициировать удаление любого системного файла...
SecurityFocus.com Newsletter 37
Premier sponsor: PentaSafe STOP NOW AND MAKE SURE THAT YOUR SYSTEMS ARE SECURE. Download PentaSafe's 10-Point Security Checkup ReportTM for Windows NT, UNIX, Linux, or IBM AS/400. In minutes, this FREE program will scan your systems, checking for the top ten most critical, yet often overlooked,...
Fortres4-analysis.txt
Fortres 4.0, An Overview. By: FrostByte S/I Date: April 11, 2000 ----------------------------- Introduction: This is my first formal document, so please excuse the crudity of the wording and grammar. This document is soley for the purpose of informing individuals of a flaw within a program herin...
Kuang2 the Virus Detection
Kuang2 the Virus was found. Kuang2 the Virus is a program that infects all the executables on the system, as well as set up a server that allows the remote control of the computer. The client program allows files to be browsed, uploaded, downloaded, hidden, etc on the infected machine. The client...
Linbert.txt
Vulnerability: Any user can overwrite any file in the system. title=Linberto v1.0.2 Q-Bert clone [email protected] Diego Javier Grigna system=Linux, svgalib [email protected] Grampa Elite Overview: Linberto under default installation creates screenshots under the /tmp directory wh...
CVE-1999-0530
A system is operating in "promiscuous" mode which allows it to perform packet sniffing...
CVE-1999-0559
A system-critical Unix file or directory has inappropriate permissions...
CVE-1999-0522
The CVE-1999-0522 issue concerns inappropriate permissions on a system-critical NIS+ table (e.g., passwd). The Red Hat entry repeats the same description, indicating the root cause is improper permissions on NIS+ tables. The NVD entry lists a high impact with confidentiality, integrity, and avail...
solaris.chkperm+arp.txt
Greetings, OVERVIEW /usr/vmsys/bin/chkperm and /usr/sbin/arp can be used to read bin-owned files. BACKGROUND All my testing was done on Solaris 2.7 and 2.6 SPARC edition. DETAILS Vuln 1 - chkperm This one isn't nearly as interesting as the instant-shell variety. Here's how it works: chkperm is...
Security Patches for Slackware 7.0 Available
...
CA-99-13: wu-ftpd upgrade available
...
CVE-1999-0484
Buffer overflow in OpenBSD ping...
SuSE_overflow_exploit.txt
Greetings, My last post regarding a sccw exploit simply allowed any user to read any file on the system but, of course, didn't yield any instant root. A much more serious problem now exists in the form of a HOME environment variable buffer overflow. If you hadn't removed the s-bit before, now is...
GNU Ffingerd 1.19 - 'Username' Validity Disclosure
source: https://www.securityfocus.com/bid/1841/info A vulnerability in Ffingerd version 1.19, the popular remote user-information server, which allows a remote user to determine whether or not a given username exists on the system. Normally, if a user has declined to be open to finger requests, a...
nt.iis.odbc.vba.txt
Date: Tue, 25 May 1999 13:59:30 -0500 From: .rain.forest.puppy. To: [email protected] Subject: Advisory: NT ODBC Remote Compromise -- Advisory: NT ODBC Remote Compromise -- By Matthew Astley RCPS http://www.fruitcake.demon.co.uk -- & Rain Forest Puppy WireTrip [email protected] -- Brief Summary...
shadow.passwds.txt
Date: Fri, 11 Jun 1999 10:11:29 EET From: Emils Klotins To: [email protected] Subject: useradd -p stores cleartext passwords / shadow-980724 Hello. Sorry if this is reported already. Didn't find it in Bugtraq archives nor in SuSE support db. OS: SuSE Linux 6.1 Program: useradd Package:...