930 matches found
CVE-1999-1193: Undefined Security Weakness
The "me" user in NeXT NeXTstep 2.1 and earlier has wheel group privileges, which could allow the me user to use the su command to become root...
CVE-2001-0196
inetd ident server in FreeBSD 4.x and earlier does not properly set group permissions, which allows remote attackers to read the first 16 bytes of files that are accessible by the wheel group...
Дырка в inetd - ident (wheel file fragment reading)
Удаленно можно прочитать первые 16 символов кроме пробелов любого файла к которому имеет доступ группа wheel...
Security Advisory: FreeBSD-SA-01:11.inetd [REVISED]
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:11 Security Advisory FreeBSD, Inc. Topic: inetd ident server allows remote users to partially read arbitrary wheel-accessible files REVISED Category: core Module: inetd...
FreeBSD-SA-01:11.inetd
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:11 Security Advisory FreeBSD, Inc. Topic: inetd ident server allows remote users to partially read arbitrary wheel-accessible files REVISED Category: core Module: inetd...
Переполнение буфера в kdesud
Классическое переполнение при разборе переменно DISPLAY. Позволяет получить привилегии группы wheel...
Дырка в gpm
при запуске пользовательского приложения из gmp-root сначала выполняется setuid и только потом setgid, который не срабатывает. В результате, пользовательское приложение запускается с gid wheel...
FreeBSD 3.3 - gdc Local Buffer Overflow
FreeBSD 3.3 - gdc Local Buffer Overflow // source: https://www.securityfocus.com/bid/834/info There is a buffer overflow vulnerability known to be present in the version of gdc shipped with the 3.3-RELEASE version of FreeBSD. By default, only users in group wheel have execute access to gdc. The...
FreeBSD 3.3 - 'gdc' Local Buffer Overflow
// source: https://www.securityfocus.com/bid/834/info There is a buffer overflow vulnerability known to be present in the version of gdc shipped with the 3.3-RELEASE version of FreeBSD. By default, only users in group wheel have execute access to gdc. The overflow occurs when the argument passed...
