3951 matches found
ksh.temp-hole.txt
Author: Paul Szabo Recently I reported that, similarly to the recently discussed tcsh vulnerability, the Bourne shell /bin/sh creates temporary files in an insecure way: http://www.securityfocus.com/templates/archive.pike?list=1&msg=200011230225.N [email protected] At the time I als...
SunOS 5.7 Catman - Local Insecure tmp Symlink Clobber Exploit
Exploit for solaris platform in category dos / poc ============================================================= SunOS 5.7 Catman - Local Insecure tmp Symlink Clobber Exploit ============================================================= !/usr/local/bin/perl -w The problem is catman creates files ...
Дырка в catman под Solaris
Некорректная работа с временными файлами...
SunOS 5.7 Catman - Local Insecure tmp Symlink Clobber
SunOS 5.7 Catman - Local Insecure tmp Symlink Clobber !/usr/local/bin/perl -w The problem is catman creates files in /tmp insecurly. They are based on the PID of the catman process, catman will happily clobber any files that are symlinked to that file. The idea of this script is to watch the...
Solaris 2.7 / 2.8 Catman - Local Insecure tmp Symlink Exploit
Exploit for unknown platform in category dos / poc ============================================================= Solaris 2.7 / 2.8 Catman - Local Insecure tmp Symlink Exploit ============================================================= !/usr/local/bin/perl -w The problem is catman creates files ...
Solaris 2.7/2.8 Catman - Local Insecure tmp Symlink
!/usr/local/bin/perl -w The problem is catman creates files in /tmp insecurly. They are based on the PID of the catman process, catman will happily clobber any files that are symlinked to that file. The idea of this script is to create a block of symlinks to the target file with the current PID a...
Дырка в pine
Редактируемое сообщение помещается во временный файл с предсказуемым именем без проверки разрешений и символьных линков...
Дырка в diskcheck
Некорректная работа с временными файлами позволяет переписать любой системный файл с помощью символьных линков...
[SECURITY] [DSA-001-1] ed symlink attack
-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------------ Debian Security Advisory 001-1 [email protected] http://www.debian.org/security/ Wichert Akkerman November 29, 2000 -...
Дырка в fsh
Уязвимость символьных линков при работе с временными файлами...
Дырка в bash (temp files)
При многострочном вводе пользователя создается временный файл без проверки символьных линков...
Дырка в ed
Ошибка символьных линков при создании временного файла...
[SECURITY] [DSA-001-1] ed symlink attack
Package : ed Problem type : symlink attack Debian-specific: no Alan Cox discovered that GNU ed a classed line editor tool created temporary files unsafely. This has been fixed in version 0.2-18.1. wget url will fetch the file for you dpkg -i file.deb will install the referenced file. Debian...
New version of elvis-tiny released
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Martin Schulze November 22, 2000 -...
Дырка в elvis-tiny
Проблема символьных линков во временных файлах...
[SECURITY] New version of ghostscript released
Package : gs Problem type : symlink attack Debian-specific: no ghostscript uses temporary files to do some of its work. Unfortunately the method used to create those files wasnt secure: mktemp was used to create a name for a temporary file, but the file was not opened safely. A second problem is...
Solaris 2.x/7.0/8 - 'Catman' Race Condition (1)
source: https://www.securityfocus.com/bid/2149/info catman is a utility for creating preformatted man pages, distributed as part of the Solaris Operating Environment. A problem exists which could allow local users to overwrite or corrupt files owned by other users. The problem occurs in the...
IE 5.x/Outlook allows executing arbitrary programs using .chm files and temporary internet files folder
Georgi Guninski security advisory 28, 2000 IE 5.x/Outlook allows executing arbitrary programs using .chm files and temporary internet files folder Systems affected: IE 5.x/Outlook/Outlook Express - probably other versions, have not tested Risk: High Date: 20 October 2000 Legal Notice: This Adviso...
Solaris 2.x7.08 - Catman Race Condition (1)
Solaris 2.x7.08 - Catman Race Condition 1 source: https://www.securityfocus.com/bid/2149/info catman is a utility for creating preformatted man pages, distributed as part of the Solaris Operating Environment. A problem exists which could allow local users to overwrite or corrupt files owned by...