Lucene search
K

1014 matches found

NVD
NVD
added 2003/12/15 5:0 a.m.13 views

CVE-2003-0962

Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail...

7.5CVSS7.9AI score0.44259EPSS
Exploits1References27
OSV
OSV
added 2003/12/15 5:0 a.m.1 views

DEBIAN-CVE-2003-0962

Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail...

7.5CVSS8.5AI score0.44259EPSS
Exploits1References1
OSV
OSV
added 2003/12/15 5:0 a.m.1 views

CVE-2003-0962

Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail...

7.9AI score
Exploits0References29
Cvelist
Cvelist
added 2003/12/10 5:0 a.m.34 views

CVE-2003-0962

Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail...

7.8AI score0.44259EPSS
Exploits1References27
Debian CVE
Debian CVE
added 2003/12/10 5:0 a.m.21 views

CVE-2003-0962

Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail...

7.5CVSS7.9AI score0.44259EPSS
Exploits1
RedHat Linux
RedHat Linux
added 2003/12/04 9:14 p.m.0 views

security flaw

Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail...

7.5CVSS6.5AI score0.44259EPSS
Exploits1References4
securityvulns
securityvulns
added 2003/11/03 12:0 a.m.70 views

[UNIX] tHTTPd Virtual Hosting Security Hole (Host: ../..)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

6.9AI score
Exploits0
seebug.org
seebug.org
added 2003/10/13 12:0 a.m.19 views

ProFTPD 1.2.7 - 1.2.9rc2 Remote Root & brute-force Exploit

No description provided by source. / ProFTPd 1.2.7 - 1.2.9rc2 remote r00t exploit -------------------------------------------- By Haggis This exploit builds on the work of bkbll to create a working, brute-force remote exploit for the \n procesing bug in ProFTPd. Tested on SuSE 8.0, 8.1 and RedHat...

7.1AI score
Exploits0
0day.today
0day.today
added 2003/10/13 12:0 a.m.17 views

ProFTPD 1.2.7 - 1.2.9rc2 Remote Root & brute-force Exploit

Exploit for linux platform in category remote exploits ========================================================== ProFTPD 1.2.7 - 1.2.9rc2 Remote Root & brute-force Exploit ========================================================== / ProFTPd 1.2.7 - 1.2.9rc2 remote r00t exploit...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2003/10/13 12:0 a.m.34 views

ProFTPd 1.2.7 < 1.2.9rc2 - Remote Code Execution / Brute Force

/ ProFTPd 1.2.7 - 1.2.9rc2 remote r00t exploit -------------------------------------------- By Haggis This exploit builds on the work of bkbll to create a working, brute-force remote exploit for the \n procesing bug in ProFTPd. Tested on SuSE 8.0, 8.1 and RedHat 7.2/8.0 it works quite well... the...

7.4AI score
Exploits0
securityvulns
securityvulns
added 2002/06/01 12:0 a.m.55 views

SECURITY.NNOV: Courier CPU exhaustion + bonus on imap-uw

Imap-uw allows user to access any file he could access locally. It's not a bug it's insecurity by design. According to vendor's web FAQ it's not pointed in FAQ inside program distribution: -=-=-=-=-=-=- 5.1 I see that the IMAP server allows access to arbitary files on the system, including...

0.3AI score
Exploits0
NVD
NVD
added 2002/05/29 4:0 a.m.15 views

CVE-2002-0244

Directory traversal vulnerability in chroot function in AtheOS 0.3.7 allows attackers to escape the jail via a .. dot dot in the pathname argument to chdir...

7.5CVSS6.5AI score0.01919EPSS
Exploits1References3
CVE
CVE
added 2002/05/03 4:0 a.m.50 views

CVE-2002-0244

The CVE-2002-0244 entry concerns a directory traversal vulnerability in the chroot function of the AtheOS 0.3.7 environment, where an attacker can escape jail confines via a .. segment in the pathname passed to chdir. Affected software: AtheOS 0.3.7. Root cause: improper handling of relative path...

7.5CVSS6.8AI score0.01919EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2002/05/03 4:0 a.m.23 views

CVE-2002-0244

Directory traversal vulnerability in chroot function in AtheOS 0.3.7 allows attackers to escape the jail via a .. dot dot in the pathname argument to chdir...

6.5AI score0.01919EPSS
Exploits1References3
CVE
CVE
added 2002/03/09 5:0 a.m.48 views

CVE-1999-1194

Technical details (affected products, versions, root cause, impact, fixes) are not publicly available in the provided documents. Monitor for updates.

7.2CVSS7.3AI score0.00135EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2002/03/09 5:0 a.m.15 views

CVE-1999-1194

chroot in Digital Ultrix 4.1 and 4.0 is insecurely installed, which allows local users to gain privileges...

6.6AI score0.00135EPSS
Exploits0References3
securityvulns
securityvulns
added 2002/02/08 12:0 a.m.25 views

AtheOS: escaping from a chroot jail

------- AtheOS ------- AtheOS is a free desktop operating system under the GPL license. AtheOS currently run on Intel, AMD and other compatible processors and support the Intel Multi Processor architecture. AtheOS home page is : http://www.atheos.cx ------- Vulnerability ------- A chroot call is...

7AI score
Exploits0
securityvulns
securityvulns
added 2002/02/08 12:0 a.m.29 views

Обхот chroot() в AtheOS (protection bypass)

С помощью обратного пути можно обратиться к файлам за пределами chroot...

1.2AI score
Exploits0References1Affected Software1
NVD
NVD
added 2001/11/13 5:0 a.m.10 views

CVE-2001-0892

Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root such as .htpasswd via a GET request with a trailing /...

5CVSS6.5AI score0.00713EPSS
Exploits0References2
Cvelist
Cvelist
added 2001/09/12 4:0 a.m.13 views

CVE-1999-1378

dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to read arbitrary files...

6.7AI score0.00647EPSS
Exploits0References1
Rows per page
Query Builder