sadmind-howto.txt

rpc.sadmind 27/02/2000 ------------------------ The bug rpc.sadmind has been reported a long time ago. But there has never been a manual for it. So i decided to explain how to exploit the bug. First of all i would recommend to use the sadmind brute forcer for the sploit files sadmindex-sparc.c an...

Sun AnswerBook2 1.4.2/1.4.3/1.4.4 - Administration Interface Access

source: https://www.securityfocus.com/bid/1554/info A lack of authentication checks for certain scripts within the administration interface of AnswerBook2 versions 1.4.2 and prior, for Solaris, allows remote users to create administration accounts. By directly accessing the /cgi-bin/admin/admin...

Дырка в Blackboard Courseinfo

Непроверяемый ввод пользователя позволяет поменять пароль любого пользователя или создать нового...

shadow.root.uid.65536.txt

Date: Mon, 24 May 1999 20:44:28 +0200 From: Lord Evil To: [email protected] Subject: UID 65536 and shadow-19990307 Recently one of our admins installed the shadow-19990307 package. While playing around I noticed that if a new user is created with UID 65536, he will become root upon login. No...