323 matches found
USN-191-1: unzip vulnerability
Imran Ghory found a race condition in the handling of output files. While a file was unpacked by unzip, a local attacker with write permissions to the target directory could exploit this to change the permissions of arbitrary files of the unzip user...
CVE-2003-1169
DATEV Nutzungskontrolle 2.1 and 2.2 has insecure write permissions for critical registry keys, which allows local users to bypass access restrictions by importing NukoInfo values in certain DATEV keys, which disables Nutzungskontrolle...
CVE-2003-1169
CVE-2003-1169 affects DATEV Nutzungskontrolle 2.1 and 2.2. The root cause is insecure write permissions on critical registry keys, which lets local users bypass access restrictions by importing NukoInfo values into certain DATEV keys, thereby disabling Nutzungskontrolle. Connected sources confirm...
[SA14899] Pine rpdump File Creation Race Condition Vulnerability
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Pine rpdump File Creation Race Condition Vulnerability...
CVE-2004-0452
Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for the world, which allows local users to delete arbitrary files and directories, and possibly read files and directories, via a symlink attack...
Linux CD protection bypass
user with read-only access can bypass these permissions and perform write and erase operations on media in a drive...
rsync: Directory traversal in rsync daemon
Background rsync is a utility that provides fast incremental file transfers. It is used to efficiently synchronize files between hosts and is used by emerge to fetch Gentoo's Portage tree. rsyncd is the rsync daemon, which listens to connections from rsync clients. Description When rsyncd is used...
open3sIDSonedcu.txt
----------========== OPEN3S-2003-08-08-eng-informix-onedcu ==========---------- Title: Local Vulnerability in IBM Informix IDSv9.40 onedcu binary Date: 08-08-2003 Platform: Only tested in Linux but can be exported to others. Impact: Users with exec perm over ./bin/onedcu can create files with 666...
DSA-422 cvs - remote vulnerability
Bulletin has no description...
CVE-2003-1474
slashem-tty in the FreeBSD Ports Collection is installed with write permissions for the games group, which allows local users with group games privileges to modify slashem-tty and execute arbitrary code as other users, as demonstrated using a separate vulnerability in LTris...
[Full-Disclosure] RealOne Player local privilege escalation
Greetings, RealOne Player for the UNIX platform, sometimes referred to as the "community supported" realplayer version 9, installs per-user configuration files with group write permissions by default. On most UNIX variants, this is a serious issue as most users belong to the same group and...
Microsoft Windows NT 4.0 - NT4ALL Denial of Service
Microsoft Windows NT 4.0 - NT4ALL Denial of Service source: https://www.securityfocus.com/bid/3144/info It has been reported that it is possible to cause a denial of service on a Windows NT system using the 'NT4ALL' tool. The DoS reportedly occurs after the system reboots while being set in...
Microsoft Windows NT 4.0 - NT4ALL Denial of Service
source: https://www.securityfocus.com/bid/3144/info It has been reported that it is possible to cause a denial of service on a Windows NT system using the 'NT4ALL' tool. The DoS reportedly occurs after the system reboots while being set in 'special mode' using 'NT4ALL'. In order to exploit NT4ALL...
ArGoSoft 1.2.2.2 *.lnk upload Directory Traversal
ArGoSoft 1.2.2.2 .lnk upload Directory Traversal AFFECTED SYSTEMS ArGoSoft 1.2.2.2 DESCRIPTION ArGoSoft also has the .lnk upload directory traversal vulnerability : PUT local.lnk remote.lnk. IMPACT users with write permissions can traverse directories, by uploading a lnk file pointing to the...
Broker 5.9.5.0 Directory Traversal
Broker 5.9.5.0 Directory Traversal AFFECTED SYSTEMS Broker 5.9.5.0 DESCRIPTION Broker has the same .lnk upload vulnerability than the one I recently found in WFTPD, with : PUT local.lnk remote.lnk. We can create our own link, this way, we can traverse the homedirectory. It's even easier than the...
ILMI community in olicom/crosscomm routers
Crosscomm/Olicom routers have a undocumented community string ILMI yes, the same as in cisco : that has read and write permissions i didn't check the whole tree, but you can set system.sysContact.0 for example. This was checked on a XLT-F router with software 'XL 80 IM Version 5.5 Build Level 2'...
wkit.joe.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TITLE: Joe's Own Editor File Link Vulnerability ADVISORY ID: WSIR-00/11-01 CONTACT: Patrik Birgersson, Wkit Security AB CLASS: File Handling Error OBJECT: joe1 exec VENDOR: Josef H. Allen STATUS: Vendor not reachable REMOTE: No LOCAL: Yes DATE:...
CVE-2000-0748
OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to replace the binary with a Trojan horse...