5601 matches found
Linux news 28.06.00
Linux Kernel 2.2.17pre9 Вышел очередной пререлиз нового стабильного ядра Linux - Linux Kernel 2.2.17. Подробнее: http://www.cs.helsinki.fi/linux/linux-kernel/2000-26/0205.html Linux kernel 2.4.0-test2-ac2 Вышло новое тестовое ядро из серии Linux kernel 2.4.0-test2-acXX - Linux kernel...
Дырка в IRIX Workshop
Утилита cvconnect позволяет переписать любой файл в системе...
Solaris 2.52.67.08 ufsrestore - Local Buffer Overflow
Solaris 2.52.67.08 ufsrestore - Local Buffer Overflow // source: https://www.securityfocus.com/bid/1348/info Solaris is a version of the UNIX Operating System distributed by Sun Microsystems. Solaris ships with a filesystem utility called ufsrestore that is used for archive/backup retrieval. A...
Solaris 2.5/2.6/7.0/8 ufsrestore - Local Buffer Overflow
// source: https://www.securityfocus.com/bid/1348/info Solaris is a version of the UNIX Operating System distributed by Sun Microsystems. Solaris ships with a filesystem utility called ufsrestore that is used for archive/backup retrieval. A problem with the utility could allow a local user to gai...
PassWD 1.2 - Weak Encryption
PassWD 1.2 - Weak Encryption // source: https://www.securityfocus.com/bid/1300/info PassWd 1.2 is a password management utility designed to store user login information to various URLs. The login information, which includes username, password and link location is stored in the pass.dat file which...
Переполнение буфера в shutdown из HP-UX
No description provided...
Утилита конфигурации NTMail работает как прокси сервер
Даже при отключенном прокси порт 8080 утилита конфигурации NTMail порт 8000 работает как прокси-сервер, т.е. перенаправляет HTTP-запросы на другие сервера...
Дырка в golddig
Дырка в suid-утилите прилагаемой к игре позволяет переписать любой локальный файл...
Linux news 13.04.00
Linux Kernel 2.2.15pre18 Сегодня вышел очередной, восемнадцатый по счету, пререлиз нового стабильного ядра Linux - Linux Kernel 2.2.15. Подробнее: http://kernelnotes.org/lnxlists/linux-kernel/lk000402/ Linux Kernel 2.3.99-pre5 Сегодня выпустили очередной пререлиз нового ядра Linux - Linux Kernel...
CNC Technology BizDB 1.0 - bizdb-search.cgi Remote Command Execution
CNC Technology BizDB 1.0 - bizdb-search.cgi Remote Command Execution source: https://www.securityfocus.com/bid/1104/info BizDB is a web databse integration product using perl CGI scripts. One of the scripts, bizdb-search.cgi, passes a variable's contents to an unchecked open call and can therefor...
Переполнение буфера в healthd
Тривиальное переполнение буфера в суид-утилите позволяет локальному пользователю получить привилегии root...
CVE-2000-0186
Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument...
FreeBSD-SA-00:12.healthd
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:12 Security Advisory FreeBSD, Inc. Topic: healthd allows a local root compromise Category: ports Module: healthd Announced: 2000-04-10 Credits: Discovered during FreeBSD...
beos.dos.txt
Problem: It is possible to crash the BeOS networking process. Discussion: The BeOS networking stack crashes when certain malformed packets are sent to it. This document explains two such packets. The first is an IP packet with the protocol field set to TCP. If the IP length field is set to be...
Уязвимость IBMHSSSB из Solaris
Суидная утилита /usr/bin/ikeyman запускает JAVA-приложение из пути, который может быть сконфигурирован пользователем...
icadecrypt.c.txt
/ icadecrypt.c Decrypt stored Citrix ICA passwords in appsrv.ini. Dug Song / include include include include include int hexdecodechar src, uchar dst, int outsize char p, pe; uchar q, qe, ch, cl; pe = src + strlensrc; qe = dst + outsize; for p = src, q = dst; p = '0' && ch = 'a' && ch = '0' && cl...
CVE-2000-0089
The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissions that allow local users to read it, aka the "RDISK Registry Enumeration File" vulnerability...
Corel Linux OS 1.0 - 'setxconf' Local Privilege Escalation
source: https://www.securityfocus.com/bid/1008/info A vulnerability exists in the setxconf utility, as shipped with Corel Linux 1.0. The -T option to setxconf will run xinit, which euid root. xinit, when executed, will invoke the contents on /.xserverrc. A malicious user could therefore execute...
CVE-2000-0089
The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissions that allow local users to read it, aka the "RDISK Registry Enumeration File" vulnerability...