PT-2000-1487 · Icq · Icqwebmail +1

Name of the Vulnerable Software and Affected Versions: ICQ 2000A Description: The issue allows local users to obtain sensitive information due to the creation of a world-readable temporary file during login, which is not deleted. This occurs in the ICQwebmail client for ICQ 2000A. Recommendations...

HP-UX 10.2011.0 - man tmp Symlink

HP-UX 10.2011.0 - man tmp Symlink source: https://www.securityfocus.com/bid/1302/info The programmers of the 'man' command on various HPUX releases have made several fatal mistakes that allow an attacker to trivially set a trap that could result in any arbitrary file being overwritten on the syst...

Possible symlink problems with Netscape 4.73

It appears that Netscape 4.73 and earlier versions incorrectly creates a temporary file in '/tmp' when importing certificates: ... open"/tmp/tmp3919AA5000A07DC", OWRONLY|OCREAT|OTRUNC, 0666 = 25 fchmod25, 0600 = 0 fstat25, stmode=0,stsize=0, ... = 0 ... Netscape doesn't try to stat/lstat the file...

Пользователь может удалить файлы в SuSE Linux

При автоматическом удалении временных файлов MAXDAYSINTMP 0 некорректно обрабатывается пробел в имени файла, что позволяет пользователю инициировать удаление любого системного файла...

RUS-CERT.200004-01.txt

RUS-CERT Advisory 200004-01: GNU Emacs 20 RUS-CERT, University of Stuttgart 2000-04-18 Summary Several vulnerabilities were discovered in all Emacs versions up to 20.6, namely: Under certain circumstances, unprivileged local users can eavesdrop the communication between Emacs and its subprocesses...

RUS-CERT Advisory 200004-01: GNU Emacs 20

RUS-CERT Advisory 200004-01: GNU Emacs 20 RUS-CERT, University of Stuttgart 2000-04-18 Summary Several vulnerabilities were discovered in all Emacs versions up to 20.6, namely: Under certain circumstances, unprivileged local users can eavesdrop the communication between Emacs and its subprocesses...

CVE-2000-0270

The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink attack...

CVE-1999-0970: Undefined Security Weakness

The OmniHTTPD visadmin.exe program allows a remote attacker to conduct a denial of service via a malformed URL which causes a large number of temporary files to be created...

Allaire ColdFusion Server 4.04.0.1 - CFCACHE Information Disclosure

Allaire ColdFusion Server 4.04.0.1 - CFCACHE Information Disclosure source: https://www.securityfocus.com/bid/917/info ColdFusion 4.x includes a function called CFCACHE. This function improves server performance by caching the HTML output of processed CFM pages. When the CFCACHE tag is used in a...

Allaire ColdFusion Server 4.0/4.0.1 - 'CFCACHE' Information Disclosure

source: https://www.securityfocus.com/bid/917/info ColdFusion 4.x includes a function called CFCACHE. This function improves server performance by caching the HTML output of processed CFM pages. When the CFCACHE tag is used in a CFM page, it creates temporary files. Some of these files are .tmp...

IRIX 6.5.x - usrlibInPersoninpview Race Condition

IRIX 6.5.x - usrlibInPersoninpview Race Condition / source: https://www.securityfocus.com/bid/1530/info Certain versions of IRIX ship with a version of inpview that creates files in '/var/tmp/' in an insecure manner and is therefore prone to a race condition. InPerson's 'inpview' is a networked...

IRIX 6.5.x - '/usr/lib/InPerson/inpview' Race Condition

/ source: https://www.securityfocus.com/bid/1530/info Certain versions of IRIX ship with a version of inpview that creates files in '/var/tmp/' in an insecure manner and is therefore prone to a race condition. InPerson's 'inpview' is a networked multimedia conferencing tool. InPerson provides...

unixware.netstation.txt

Greetings, OVERVIEW A vulnerability in IBM's Network Station Manager will allow any local user to gain root privileges. BACKGROUND Though I only tested NetStation on UnixWare 7.1, I would imagine that this vulnerability is present on most NetStation implementations. This daemon is installed/runni...

IBM Network Station Manager 2.0 R1 - Race Condition

IBM Network Station Manager 2.0 R1 - Race Condition // source: https://www.securityfocus.com/bid/900/info IBM's Network Station Manager is a client/server application which facilitates management for IBM Network Stations. It is possible to locally gain root priviliges on hosts running the...

CVE-1999-0342

CVE-1999-0342 : The vulnerability affects Linux PAM modules, described as allowing local users to gain root access using temporary files. The connected sources corroborate a local privilege escalation in PAM, but do not specify affected distributions, versions, or a concrete patch/fix. No exploit...

CVE-1999-0458

L0phtcrack 2.5 used temporary files in the system TEMP directory which could contain password information...

CVE-1999-0342

Linux PAM modules allow local users to gain root access using temporary files...

CVE-1999-0342: Undefined Security Weakness

Linux PAM modules allow local users to gain root access using temporary files...

CVE-1999-0458: Undefined Security Weakness

L0phtcrack 2.5 used temporary files in the system TEMP directory which could contain password information...

rootcron.txt

!/bin/sh clear echo '------------------------------------------------------------------' echo 'Marchew Hyperreal Industries ' echo 'Stumilowy Las Team ' echo '---------------------------- presents ----------------------------' echo echo ' -= vixie-cron root sploit by Michal Zalewski =-' echo echo...