3021 matches found
URGENT SECURITY ADVISORY FOR SSH SECURE SHELL 3.0.0
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dear Secure Shell Community, A potential remote root exploit has been discovered in SSH Secure Shell 3.0.0, for Unix only, concerning accounts with password fields consisting of two or fewer characters. Unauthorized users could potentially log in to...
HP OpenView OmniBack II A.03.50 - Command Execution (Metasploit)
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HP OpenView...
scx-sa-13.txt
============================================================================= Securax-SA-13 Security Advisory belgian.networking.security Dutch ============================================================================= Topic: all tty's can be written to when connecting Announced: 2001-01-01...
SLA-15-PHPix.txt
Synnergy Laboratories Advisory SLA-2000-15 NAME PHPix 1.0.X directory traversal vulnerability AFFECTED Linux/UNIX with PHPix 1.0.0/1.0.1/1.0.2 SYNOPSIS Synnergy Labs has found a flaw within PHPix that allows a user to successfully traverse the filesystem on a remote host, allowing arbitary...
Серьезная уязвимость многих Unix через locale в glibc
Функции работы с locale позволяют пользователям создавать пользовательские отображения строк, при этом не проверяется наличие форматных символов. Функции locale используются многими suid-приложениями. В некоторых случаях проблема становится удаленной из-за некорректной обработки переменных...
Дырка в keydebugd в True64 Unix
ПРотокол позволяет перезаписать любой файл неавторизованным пользователем с привилегией root...
clientagent662.txt
Client Agent 6.62 for Unix Vulnerability Tested on a Debian 2.2.14 Introduction -------------- Client Agent has a hole allowing to execute an arbitrary code by root without its knowing. In the meantime, some conditions are necessary to exploit this vulnerability. Description ------------ Client...
xloadimage -- buffer overflow in FACES image handling
In 2001, zen-parse discovered a buffer overflow in xloadimage's FACES image loader. A maliciously crafted image could cause xloadimage to execute arbitrary code. A published exploit exists for this vulnerability. In 2005, Rob Holland discovered that the same vulnerability was present in xli...
metasearch
Vulnerable Program: Meta Tag Generator meta.pl Platform : UNIX Company : www.cgi-access.com Impact : Remote users can view arbitary files with httpd privilidges Found by : slackette [email protected] Date : 14th November Meta Tag Generator As quoted from their site, "You can now offer your...
DIGITAL UNIX 4.0 def AIX 4.3.2 CDE 2.1 IRIX 6.5.14 Solaris 7.0 - Local Buffer Overflow
DIGITAL UNIX 4.0 def AIX 4.3.2 CDE 2.1 IRIX 6.5.14 Solaris 7.0 - Local Buffer Overflow / source: https://www.securityfocus.com/bid/635/info TRU64/DIGITAL UNIX 4.0 d/e/f,AIX include include include define BUFLEN 998 char exploitcode =...
PT-1999-1188 · Unix · Unix
Name of the Vulnerable Software and Affected Versions: Unix affected versions not specified Description: The issue concerns a Unix account with a name other than "root" that has UID 0, effectively granting it root privileges. Recommendations: At the moment, there is no information about a newer...
Digital UNIX 4.04.0 B4.0 D - SUIDSGID Core File
Digital UNIX 4.04.0 B4.0 D - SUIDSGID Core File source: https://www.securityfocus.com/bid/74/info Digital UNIX 4.0 will follow symlinks while writting core files if two setuid programs dump core in sucession. The core file is owned by root but with the user's groud id. The core file permissions a...
CVE-1999-1304
Vulnerability in login in SCO UNIX 4.2 and earlier allows local users to gain root access...
CVE-1999-1303
Vulnerability in prwarn in SCO UNIX 4.2 and earlier allows local users to gain root access...
CVE-1999-1162
Vulnerability in passwd in SCO UNIX 4.0 and earlier allows attackers to cause a denial of service by preventing users from being able to log into the system...
CVE-2026-47321
This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...
CVE-2025-38213
Notes ubuntu-security Does not apply to software found in Ubuntu...
CVE-2026-48769
This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...