2020 matches found
Various shells create temporary files insecurely when using << operator
Overview sh uses /tmp files of a predictable name in creating files for input redirection using the operator. Description When performing the "" redirection, /bin/sh creates a temporary file in /tmp with a name based on the process id, writes subsequent input out to that file, and then closes the...
Security Update: [CSSA-2001-SCO.3] UnixWare - cron buffer overflow
To: [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: UnixWare - cron buffer overflow Advisory number: CSSA-2001-SCO.3 Issue date: 2001 June, 27 Cross reference: 1. Problem Description The cron command is vulnerable to a...
Дырка в vixie cron (privelege drop failure)
При определенных условиях при выполнении задач не сбрасываются привилегии root...
Vixie cron vulnerability
Thank you for using SecurityFocus.com's Security Intelligence Alert SIA Service. To manage account please visit https://alerts.securityfocus.com/ For questions or comments email us at [email protected]. --------------------------------------------------------------------------- Security...
[SECURITY] [DSA-054-1] cron local root exploit
Package : cron Problem type : local root exploit Debian-specific: no A recent fall 2000 security fix to cron introduced an error in giving up privileges before invoking the editor. A malicious user could easily gain root access. This has been fixed in version 3.0pl1-57.3 or 3.0pl1-67 for unstable...
Vixie Cron crontab 3.0 - Privilege Lowering Failure (1)
Vixie Cron crontab 3.0 - Privilege Lowering Failure 1 source: https://www.securityfocus.com/bid/2687/info Vixie cron is an implementation of the popular UNIX program that runs user-specified programs at periodic scheduled times. When a parsing error occurs after a modification operation, crontab...
Vixie Cron crontab 3.0 - Privilege Lowering Failure (1)
source: https://www.securityfocus.com/bid/2687/info Vixie cron is an implementation of the popular UNIX program that runs user-specified programs at periodic scheduled times. When a parsing error occurs after a modification operation, crontab will fail to drop privileges correctly for subsequent...
CVE-2000-0312
cron in OpenBSD 2.5 allows local users to gain root privileges via an argv that is not NULL terminated, which is passed to cron's fake popen function...
CVE-2000-0312
OpenBSD 2.5 cron is affected. A local user can exploit an argv[] that is not NULL terminated, which is passed to cron’s fake popen function, to gain root privileges.
CVE-2000-0312
cron in OpenBSD 2.5 allows local users to gain root privileges via an argv that is not NULL terminated, which is passed to cron's fake popen function...
CVE-2000-0312: Undefined Security Weakness
cron in OpenBSD 2.5 allows local users to gain root privileges via an argv that is not NULL terminated, which is passed to cron's fake popen function...
[SECURITY] [DSA 024-1] New version of cron released
---------------------------------------------------------------------------- Debian Security Advisory DSA-024-1 [email protected] http://www.debian.org/security/ Martin Schulze January 27, 2001 - ---------------------------------------------------------------------------- Package : cron...
UUCP Exploit - file creation/overwriting (symlinks)
Exploit for linux platform in category local exploits =================================================== UUCP Exploit - file creation/overwriting symlinks =================================================== / root exploit: multiple subsystem errors allowing root exploit bashack.c - Thu Nov 30...
UUCP - File Creation/Overwriting Symlinks
/ root exploit: multiple subsystem errors allowing root exploit bashack.c - Thu Nov 30 21:50:50 NZDT 2000 redhat 6.1 /etc/rc.d/ and scripts that are trusting the untrustworthy. /bin/sh acts silly when u get it to use the include define FNAME "/usr/man/man1/last.1.gz;export PATH=.;cd ..;cd ..;cd...
[ADV/EXP]: RH6.x root from bash /tmp vuln + MORE
Advisory: its been fixed, check some previous messages. bash1 /tmp vulns Also: uucp exploit - file creation/overwriting symlinks kinda exploit for man/makewhatis Requires: 1 local access to run the program 2 a crash or reboot to happened 3 /etc/cron.weekly/makewhatis.cron to be executed by cron 4...
vixie-cron - Local Privilege Escalation
vixie-cron - Local Privilege Escalation !/bin/sh echo '.-------------------------------------------------------------------------.' echo '| Marchew Hyperreal Industries ................... |' echo "| ...well, it is just me, but it is more elite to speak as a group... |" echo...
vixie-cron Local Root Exploit
Exploit for linux platform in category local exploits ============================= vixie-cron Local Root Exploit ============================= !/bin/sh echo '.-------------------------------------------------------------------------.' echo '| Marchew Hyperreal Industries ................... |'...
vixie-cron - Local Privilege Escalation
!/bin/sh echo '.-------------------------------------------------------------------------.' echo '| Marchew Hyperreal Industries ................... |' echo "| ...well, it is just me, but it is more elite to speak as a group... |" echo "--------------------------------- presents...
[SECURITY] New Debian cron packages released
Package: cron Vulnerability: local priviledge escalation Debian-specific: no Vulnerable: yes The version of Vixie Cron shipped with Debian GNU/Linux 2.2 is vulnerable to a local attack, discovered by Michal Zalewski. Several problems, including insecure permissions on temporary files and race...
[SECURITY] New Debian cron packages released
---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz November 17, 2000 - ---------------------------------------------------------------------------- Package: cron Vulnerability:...