4142 matches found
Security Advisory: FreeBSD-SA-01:12.periodic [REVISED]
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:12 Security Advisory FreeBSD, Inc. Topic: periodic uses insecure temporary files REVISED Category: core Module: periodic Announced: 2001-01-29 Revised: 2001-01-29 Credits...
FreeBSD-SA-01:13.sort
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:13 Security Advisory FreeBSD, Inc. Topic: sort uses insecure temporary files Category: core Module: sort Announced: 2001-01-29 Credits: Discovered during internal auditin...
FreeBSD-SA-01:12.periodic
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:12 Security Advisory FreeBSD, Inc. Topic: periodic uses insecure temporary files REVISED Category: core Module: periodic Announced: 2001-01-29 Revised: 2001-01-29 Credits...
Дырка в WebMIN
небезопасное создание временных файлов...
FreeBSD-SA-01:03.bash1
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:03 Security Advisory FreeBSD, Inc. Topic: bash1 creates insecure temporary files Category: ports Module: bash1 Announced: 2001-01-15 Affects: Ports collection prior to th...
Проблемы символьных линков во многих утилитах (linux)
Во многих утилитах не проверяют символьные линки при создании временных файлов...
[SECURITY] [DSA-011-1] New version of mgetty released
Package: mgetty Vulnerability: insecure tempfile Debian-specific: no Immunix reports that mgetty does not create temporary files in a secure manner, which could lead to a symlink attack. This has been corrected in mgetty 1.1.21-3potato1 We recommend you upgrade your mgetty package immediately. wg...
[SECURITY] [DSA-008-1] dialog symlink attack
Package : dialog Problem type : insecure temporary files Debian-specific: no Matt Kraai reported that he found a problem in the way dialog creates lock-files: it did not create them safely which made it susceptible to a symlink attack. This has been fixed in version 0.9a-20000118-3bis. wget url...
ksh.temp-hole.txt
Author: Paul Szabo Recently I reported that, similarly to the recently discussed tcsh vulnerability, the Bourne shell /bin/sh creates temporary files in an insecure way: http://www.securityfocus.com/templates/archive.pike?list=1&msg=200011230225.N [email protected] At the time I als...
SunOS 5.7 Catman - Local Insecure tmp Symlink Clobber Exploit
Exploit for solaris platform in category dos / poc ============================================================= SunOS 5.7 Catman - Local Insecure tmp Symlink Clobber Exploit ============================================================= !/usr/local/bin/perl -w The problem is catman creates files ...
SunOS 5.7 Catman - Local Insecure tmp Symlink Clobber
SunOS 5.7 Catman - Local Insecure tmp Symlink Clobber !/usr/local/bin/perl -w The problem is catman creates files in /tmp insecurly. They are based on the PID of the catman process, catman will happily clobber any files that are symlinked to that file. The idea of this script is to watch the...
Дырка в catman под Solaris
Некорректная работа с временными файлами...
Solaris 2.7 / 2.8 Catman - Local Insecure tmp Symlink Exploit
Exploit for unknown platform in category dos / poc ============================================================= Solaris 2.7 / 2.8 Catman - Local Insecure tmp Symlink Exploit ============================================================= !/usr/local/bin/perl -w The problem is catman creates files ...
Solaris 2.7/2.8 Catman - Local Insecure tmp Symlink
!/usr/local/bin/perl -w The problem is catman creates files in /tmp insecurly. They are based on the PID of the catman process, catman will happily clobber any files that are symlinked to that file. The idea of this script is to create a block of symlinks to the target file with the current PID a...
Дырка в pine
Редактируемое сообщение помещается во временный файл с предсказуемым именем без проверки разрешений и символьных линков...
Дырка в diskcheck
Некорректная работа с временными файлами позволяет переписать любой системный файл с помощью символьных линков...
[SECURITY] [DSA-001-1] ed symlink attack
-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------------ Debian Security Advisory 001-1 [email protected] http://www.debian.org/security/ Wichert Akkerman November 29, 2000 -...
Дырка в bash (temp files)
При многострочном вводе пользователя создается временный файл без проверки символьных линков...