1280 matches found
CVE-2001-0892: Exposure of Resource to Wrong Sphere
Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root such as .htpasswd via a GET request with a trailing /...
CVE-2001-0892
Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root such as .htpasswd via a GET request with a trailing /...
CVE-1999-1378
dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to read arbitrary files...
CVE-1999-1378: Undefined Security Weakness
dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to read arbitrary files...
CVE-2000-1144
Recourse ManTrap 1.6 sets up a chroot environment to hide the fact that it is running, but the inode number for the resulting "/" file system is higher than normal, which allows attackers to determine that they are in a chroot environment...
CVE-2000-1144
CVE-2000-1144 affects Recourse ManTrap 1.6. The issue is that the chroot'ed root (/) has an inode number higher than normal, enabling an attacker to determine that the process is running inside a chroot environment. The available sources describe the vulnerability as exposing chroot presence (loc...
CVE-2000-1144: Undefined Security Weakness
Recourse ManTrap 1.6 sets up a chroot environment to hide the fact that it is running, but the inode number for the resulting "/" file system is higher than normal, which allows attackers to determine that they are in a chroot environment...
linux chroot()/execve() code
Exploit for linux/x86 platform in category shellcode ============================ linux chroot/execve code ============================ / This is Linux chroot/execve code.It is 80 bytes long.I have some ideas how to make it smaller, but till then use this one. signed predator linux registered use...
linux chroot/execve code
linux chroot/execve code. Shellcode exploit for linx86 platform / This is Linux chroot/execve code.It is 80 bytes long.I have some ideas how to make it smaller, but till then use this one. signed predator linux registered user : 181116 preedatoratsendmaildotru / char...
CVE-2000-1144
Recourse ManTrap 1.6 sets up a chroot environment to hide the fact that it is running, but the inode number for the resulting "/" file system is higher than normal, which allows attackers to determine that they are in a chroot environment...
Vulnerability in Winsock FTPD 2.41/3.00 (Pro)
Overdrive Advisory 1 --------------------------- Synopsis Subject : Vulnerability in Winsock ftpd Application : Winsock FTPd v2.41 RC14, Winsock FTPd v2.41 Pro, Winsock FTPd v3.00 Pro Platform : Win32 Description : a local user can break the chroot jail Date : 11/28/2000 Author : Interstellar...
ManTrap 1.6.1 - Root Directory Inode Disclosure
ManTrap 1.6.1 - Root Directory Inode Disclosure / source: https://www.securityfocus.com/bid/1909/info ManTrap is a "honeypot" intrusion detection system designed to lure attackers into it for analysis. The honeypot is implemented as a chroot'ed Solaris environment, designed to look and feel real ...
ManTrap 1.6.1 - Root Directory Inode Disclosure
/ source: https://www.securityfocus.com/bid/1909/info ManTrap is a "honeypot" intrusion detection system designed to lure attackers into it for analysis. The honeypot is implemented as a chroot'ed Solaris environment, designed to look and feel real to an attacker who gains access to it. Chroot...
ManTrap 1.6.1 - Hidden Process Disclosure
// source: https://www.securityfocus.com/bid/1908/info ManTrap is a "honeypot" intrusion detection system designed to lure attackers into it for analysis. The honeypot is implemented as a chroot'ed Solaris environment, designed to look and feel real to an attacker who gains access to it. To ensur...
linux/x86 break chroot setuid(0) + /bin/sh 132 bytes
Exploit for linux/x86 platform in category shellcode ==================================================== linux/x86 break chroot setuid0 + /bin/sh 132 bytes ==================================================== / Linux/x86 - setreuid0, 0; - chroot-break make a temp dir with mkdir, chroot to tempdi...
linux/x86 break chroot setuid0 + /bin/sh 132 bytes
linux/x86 break chroot setuid0 + /bin/sh 132 bytes. Shellcode exploit for linx86 platform / Linux/x86 - setreuid0, 0; - chroot-break make a temp dir with mkdir, chroot to tempdir, go through a loop of chdir".."; then a final chroot"."; - execve of /bin/sh used in several wu-ftpd, beroftpd and...
CVE-2000-0462
CVE-2000-0462 concerns ftpd in NetBSD 1.4.2, where the daemon does not correctly parse entries in /etc/ftpchroot and fails to chroot the specified users. The underlying issue allows authenticated users to access files outside their home directory, compromising confidentiality. The available sourc...
CVE-2000-0462
ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which allows those users to access other files outside of their home directory...