967 matches found
Debian Security Advisory DSA 870-1 (sudo)
The remote host is missing an update to sudo announced via advisory DSA 870-1. Tavis Ormandy noticed that sudo, a program that provides limited super user privileges to specific users, does not clean the environment sufficiently. The SHELLOPTS and PS4 variables are dangerous and are still passed...
PT-2006-5707 · Maxdev · Maxdev Md-Pro
Name of the Vulnerable Software and Affected Versions: MAXdev MDPro versions prior to 1.0.76 updated before 20060918 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This is achieved through vectors that bypass the XSS protection...
sudo privilege escalation
few envoronment vaqriables used by bash perl and python are not cleaned...
[Full-disclosure] Operator Shell (osh) Stack-based Buffer Overflow
!/usr/bin/perl OSH 1.7 Exploit 2 Gonna bang away at this until it's removed ;- EDUCATIONAL purposes only.... :- by Charles Stevenson core [email protected] Description: The Operator Shell Osh is a setuid root, security enhanced, restricted shell. It allows the administrator to carefully limit the...
[SA13199] Sudo Environment Cleaning Privilege Escalation Vulnerability
TITLE: Sudo Environment Cleaning Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA13199 VERIFY ADVISORY: http://secunia.com/advisories/13199/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Sudo 1.x http://secunia.com/product/3929/ DESCRIPTION: Liam...
