170 matches found
CVE-2007-3036
Unspecified vulnerability in the 1 Windows Services for UNIX 3.0 and 3.5, and 2 Subsystem for UNIX-based Applications in Microsoft Windows 2000, XP, Server 2003, and Vista allows local users to gain privileges via unspecified vectors related to "certain setuid binary files."...
CVE-2007-3036: Undefined Security Weakness
Unspecified vulnerability in the 1 Windows Services for UNIX 3.0 and 3.5, and 2 Subsystem for UNIX-based Applications in Microsoft Windows 2000, XP, Server 2003, and Vista allows local users to gain privileges via unspecified vectors related to "certain setuid binary files."...
Microsoft Windows Services for UNIX privilege escalation vulnerability
Overview Microsoft Windows Services for UNIX contains a vulnerability that may allow a local, authenticated attacker to gain elevated privileges. Description Windows Services for UNIX fails to properly handle setuid binary files. An attacker may be able to trigger this vulnerability by running a...
MS07-053: Vulnerability in Windows Services for UNIX Could Allow Elevation of Privilege (939778)
The remote host is running a version of the Windows Services for UNIX that is vulnerable to a local privileges elevation due to a flaw in different setuid binary files. An attacker may use this to elevate his privileges on this host. Tenable Network Security, Inc. include"compat.inc"; if...
Low: Red Hat Security Advisory: perl security update
Updated Perl packages that fix security issues and contain several bug fixes are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. Perl is a high-level programming language commonly used for system...
SLX Server 6.1 Arbitrary File Creation Exploit (PoC)
No description provided by source. !/usr/bin/perl Proof of concept exploit: Arbitrary file creation for SLX server 6.1 Written by Carl Livitt, Agenda Security Services, June 2004. This exploit abuses the ProcessQueueFile command on SLX 6.1 others? servers to create arbitrary files on the filesyst...
Проблема в IE - скрипты в двоичных файлах
Вместо проверки поля Content-Type HTTP-заголовка IE проверяет первые байты файла и по ним определяет тип. Если в файле содержатся HTML-таги, он будет воспринят как HTML, не смотря на его соответствие другим форматам. Это позволяет вставлять javascript В двоичные файлы например картинки...
GeoCel WindMail 3.0 - Remote File Read
GeoCel WindMail 3.0 - Remote File Read source: https://www.securityfocus.com/bid/1073/info WindMail is a command-line mailer that can be integrated with perl cgi applications to create form-mail capability for a website. WindMail 3.0 and possibly previous versions can be used to retrieve any asci...
unix7.var-sadm.txt
w00w00 Security Development WSD http://www.w00w00.org/advisories.html --------------------------------------------------------------------------- Relocation of w00w00.org: After being relocated, http://www.w00w00.org is up and running. Although we are using an old backup of the site off the mirro...
