176 matches found
[SECURITY] [DSA 142-1] New OpenAFS packages fix integer overflow bug
-------------------------------------------------------------------------- Debian Security Advisory DSA 142-1 [email protected] http://www.debian.org/security/ Martin Schulze August 5th, 2002 - -------------------------------------------------------------------------- Package : openafs...
Apple Mac OSX 10.1.x - SoftwareUpdate Arbitrary Package Installation
source: https://www.securityfocus.com/bid/5176/info A vulnerability has been reported for MacOS X where an attacker may use SoftwareUpdate to install malicious software on the vulnerable system. SoftwareUpdate uses HTTP, without any authentication, to obtain updates from Apple. Any updated packag...
SGI IRIX 6.x - rpc.xfsmd Remote Command Execution
SGI IRIX 6.x - rpc.xfsmd Remote Command Execution // source: https://www.securityfocus.com/bid/5075/info Throghout the implementation of the supported remote procedure calls, the server uses the popen libc function. When popen is used, arguments passed to the RPC are included in the command strin...
PHP 4.x/5.x MySQL Library - 'Safe_mode' Filesystem Circumvention (1)
?php / source: https://www.securityfocus.com/bid/4026/info PHP's 'safemode' feature may be used to restrict access to certain areas of a filesystem by PHP scripts. However, a problem has been discovered that may allow an attacker to bypass these restrictions to gain unauthorized access to areas o...
Cisco 6400 NRP2 Telnet Vulnerability
...
Дырки в Sun Cluster
Sun Cluster позволяет удаленному пользователю без авторизации обращаться к приложениям, обычно доступным только root, в сочетании с локальной уязвимостью позволяет локальным пользователям получить доступ на чтение к любым файлам...
ntop.advisory.txt
================================================================================ Hackerslab bugpaper ntop web mode vulnerabliity ================================================================================ Command : /sbin/ntop -w SYSTEM : N/A INFO : ntop - display top network users -w Starts...
pop2d.fold.txt
While working to port ipop2d exploit to java discovered another hole in the FOLD command of ipop2d... The ability to read files that are readable via the pop2d userid. Attached is a ported exploit in java for bnc... as well as the pop2d exploit transcript. -d0tslash b10z EFnet 9x EFnet...
CVE-2000-0345
The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via the show command...
CVE-1999-0166
NFS allows users to use a "cd .." command to access other directories besides the exported file system...
SGI IRIX 6.0.1 - 'colorview' Read Files
source: https://www.securityfocus.com/bid/336/info Colorview fails to validate that the user has access to the file supplied to the -text option. As a result, users can view arbitrary files. /usr/sbin/colorview -text /var/spool/mail/admin...
SunView (SunOS 4.1.1) - 'selection_svc' Remote File Read
Source: https://www.securityfocus.com/bid/8/info On Sun3 and Sun4 systems, a remote system can read any file that is readable to the user running SunView. On the 386i, a remote system can read any file on the workstation running SunView regardless of protections. Note that if root runs Sunview, a...
