793 matches found
Linux PAM 0.77 - Pam_Wheel Module 'getlogin() Username' Spoofing Privilege Escalation
source: https://www.securityfocus.com/bid/7929/info A vulnerability has been discovered in the Linux-Pam pamwheel module. The problem exists in the way the module authenticates users under certain configurations. Specifically, if the module is configured to allow wheel group members to use the 's...
Security Advisory FreeBSD-SA-02:24.k5su
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:24.k5su Security Advisory The FreeBSD Project Topic: k5su utility does not honor wheel' group Category: kerberos5 Module: kerberos5/usr.bin/k5su Announced: 2002-05-20...
FreeBSD k5su problems
Wheel group membership is not checked fo k5su...
CVE-1999-1193
The "me" user in NeXT NeXTstep 2.1 and earlier has wheel group privileges, which could allow the me user to use the su command to become root...
CVE-2001-0196
inetd ident server in FreeBSD 4.x and earlier does not properly set group permissions, which allows remote attackers to read the first 16 bytes of files that are accessible by the wheel group...
Security Advisory: FreeBSD-SA-01:11.inetd [REVISED]
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:11 Security Advisory FreeBSD, Inc. Topic: inetd ident server allows remote users to partially read arbitrary wheel-accessible files REVISED Category: core Module: inetd...
Дырка в inetd - ident (wheel file fragment reading)
Удаленно можно прочитать первые 16 символов кроме пробелов любого файла к которому имеет доступ группа wheel...
FreeBSD-SA-01:11.inetd
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:11 Security Advisory FreeBSD, Inc. Topic: inetd ident server allows remote users to partially read arbitrary wheel-accessible files REVISED Category: core Module: inetd...
Переполнение буфера в kdesud
Классическое переполнение при разборе переменно DISPLAY. Позволяет получить привилегии группы wheel...
Дырка в gpm
при запуске пользовательского приложения из gmp-root сначала выполняется setuid и только потом setgid, который не срабатывает. В результате, пользовательское приложение запускается с gid wheel...
FreeBSD 3.3 - gdc Local Buffer Overflow
FreeBSD 3.3 - gdc Local Buffer Overflow // source: https://www.securityfocus.com/bid/834/info There is a buffer overflow vulnerability known to be present in the version of gdc shipped with the 3.3-RELEASE version of FreeBSD. By default, only users in group wheel have execute access to gdc. The...
FreeBSD 3.3 - 'gdc' Local Buffer Overflow
// source: https://www.securityfocus.com/bid/834/info There is a buffer overflow vulnerability known to be present in the version of gdc shipped with the 3.3-RELEASE version of FreeBSD. By default, only users in group wheel have execute access to gdc. The overflow occurs when the argument passed...
