1589 matches found
Ubuntu/Debian Apache 1.3.33/1.3.34 (CGI TTY) Local Root Exploit
Exploit for linux platform in category local exploits =============================================================== Ubuntu/Debian Apache 1.3.33/1.3.34 CGI TTY Local Root Exploit =============================================================== / :: Kristian Hermansen :: Date: 20070229 Description...
Ubuntu/Debian Apache 1.3.33/1.3.34 (CGI TTY) Local Root Exploit
No description provided by source. / :: Kristian Hermansen :: Date: 20070229 Description: Local attacker can influence Apache to direct commands into an open tty owned by user who started apache process, usually root. This results in arbitrary command execution. Affects: Apache 1.3.33/1.3.34 on...
Fedora Core 5 : xterm-223-1.fc5 (2007-024)
Mon Jan 8 2007 Miroslav Lichvar - 223-1.fc5 - update to 223 - use correct tty group 219048 - spec cleanup - Thu Nov 23 2006 Miroslav Lichvar - 213-2.fc5 - fix segfault when /etc/termcap is missing 201246 - Wed May 31 2006 Jason Vas Dias - 213-1 - Upgrade to upstream version 213 fixes bug 192627 -...
Ubuntu 4.10 : linux-source-2.6.8.1 vulnerabilities (USN-95-1)
A remote Denial of Service vulnerability was discovered in the Netfilter IP packet handler. This allowed a remote attacker to crash the machine by sending specially crafted IP packet fragments. CAN-2005-0209 The Netfilter code also contained a memory leak. Certain locally generated packet fragmen...
Design/Logic Flaw
rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices...
DEBIAN-CVE-2006-0126
rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices...
CVE-2006-0126
rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices...
CVE-2006-0126
rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices...
CVE-2006-0126
CVE-2006-0126 affects rxvt-unicode prior to 6.3 on platforms that use openpty and non-Unix pty devices (e.g., Linux and most BSDs). The issue is that tty device permissions are not preserved as intended, allowing local users to gain read and write access to the devices. The description specifies ...
[SA18301] rxvt-unicode TTY Device Insecure Permissions Vulnerability
TITLE: rxvt-unicode TTY Device Insecure Permissions Vulnerability SECUNIA ADVISORY ID: SA18301 VERIFY ADVISORY: http://secunia.com/advisories/18301/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: Local system SOFTWARE: rxvt-unicode 5.x http://secunia.com/product/4777/ rxvt-unicode 6.x...
rxvt-unicode weak permissions
Insecure permissions for few tty devices...
rxvt-unicode -- restore permissions on tty devices
A rxvt-unicode changelog reports: SECURITY FIX: on systems using openpty, permissions were not correctly updated on the tty device and were left as world-readable and world-writable likely in original rxvt, too, and were not restored properly. Affected are only systems where non-unix ptys were us...
WIDCOMM Bluetooth Software < 3.0 Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits =============================================================== WIDCOMM Bluetooth Software +include + +define UPUSHAPPNAME "BluePIMped v0.1" define BTSERVICE "OBEX" define OBEXPUSH 5 @@ -316,6 +325,9 @@ switch event case OBEXEVPROGRESS:...
CVE-2005-0403
initdev in ttyio.c in the Red Hat backport of NPTL to Red Hat Enterprise Linux 3 does not properly clear controlling tty's in multi-threaded applications, which allows local users to cause a denial of service crash and possibly gain tty access via unknown attack vectors that trigger an access of ...
CVE-2005-0403
CVE-2005-0403 affects Red Hat Enterprise Linux 3 via the Red Hat backport of NPTL. The vulnerable code is in init_dev of tty_io.c , where controlling ttys are not properly cleared in multi‑threaded applications, enabling a local user to crash the system and potentially gain access to ttys through...
Cisco IOS Tiny shellcode v1.0
Exploit for hardware platform in category shellcode ============================= Cisco IOS Tiny shellcode v1.0 ============================= ---------------------------------------------------------------------------------------- Cisco IOS Tiny shellcode v1.0 c 2007 IRM Plc By Gyan Chawdhary...
CVE-2001-1555
ptchmod in Solaris 8 does not call fdetach to reset terminal privileges when users log out of terminals, which allows local users to write to other users' terminals by modifying the ACL of a TTY...
CVE-2005-1430
The CVE-2005-1430 issue affects Mac OS X 10.3.x and earlier. The vulnerability arises from insecure permissions on a pseudo terminal (pty) that is managed by a non-setuid program, allowing local users to read or modify other users’ sessions. Public documents do not specify affected versions beyon...
MacOS X terminals information leak
Unprivileged user is unable to obtain exclusive tty access...
Insecure pty permissions in OS X < 10.4
Hi all. Mac OS X 10.3.x and earlier doesn't provide any mechanism for non-setuid-root programs to change permissions on ptys. Hence xterms, screen sessions, and Terminal.app windows with explicitly specified commands are vulnerable to tty sniffing. Note that using Terminal.app's standard terminal...