485 matches found
HP-UX PHCO_22767 : HPSBUX0103-146 Sec. Vulnerability in crontab(1) (rev.1)
s700800 11.00 cumulative crontab/at/cron patch : crontab1 contains a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO22767. The text itself is copyright C Hewlett-Packard Development Compan...
HP-UX Security patch : PHCO_23455
The remote host is missing HP-UX Security Patch number PHCO23455 . Sec. Vulnerability in crontab1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17055; scriptversion"1.7";...
Apple Mac OSX - '.DS_Store' Arbitrary File Overwrite
!/usr/bin/perl OSX Finder DSStore arbitrary file overwrite exploit. root version vade79 - [email protected] fakehalo/realhalo this will create a directory called "xfinder" in your home directory, once the root user has modified that directory using Finder in almost any waysuch as copying a file out ...
Apple Mac OSX - .DS_Store Arbitrary File Overwrite
Apple Mac OSX - .DSStore Arbitrary File Overwrite !/usr/bin/perl OSX Finder DSStore arbitrary file overwrite exploit. root version vade79 - [email protected] fakehalo/realhalo this will create a directory called "xfinder" in your home directory, once the root user has modified that directory using...
Mac OS X DS_Store Arbitrary File Overwrite Exploit
Exploit for macOS platform in category local exploits ================================================== Mac OS X DSStore Arbitrary File Overwrite Exploit ================================================== !/usr/bin/perl OSX Finder DSStore arbitrary file overwrite exploit. root version vade79 -...
Debian DSA-024-1 : cron - local insecure crontab handling
The FreeBSD team has found a bug in the way new crontabs were handled which allowed malicious users to display arbitrary crontab files on the local system. This only affects valid crontab files so it can't be used to get access to /etc/shadow or something. crontab files are not especially secure...
Debian bsdmainutils 6.0.14 - Calendar Information Disclosure
Debian bsdmainutils 6.0.14 - Calendar Information Disclosure // source: https://www.securityfocus.com/bid/11077/info The calendar utility contained in the bsdmainutils package on Debian GNU/Linux systems is reported susceptible to an information disclosure vulnerability. This is due to a lack of...
Debian bsdmainutils 6.0.14 - Calendar Information Disclosure
// source: https://www.securityfocus.com/bid/11077/info The calendar utility contained in the bsdmainutils package on Debian GNU/Linux systems is reported susceptible to an information disclosure vulnerability. This is due to a lack of proper file authorization checks by the application. The...
CVE-2002-0716
CVE-2002-0716 describes a format string vulnerability in the crontab component of SCO OpenServer 5.0.5 and 5.0.6 . The issue arises from format string specifiers in the file name argument , allowing local users to gain privileges . The vulnerability is tied to the crontab handling of a file name ...
CVE-2002-0716: Undefined Security Weakness
Format string vulnerability in crontab for SCO OpenServer 5.0.5 and 5.0.6 allows local users to gain privileges via format string specifiers in the file name argument...
CVE-2002-0716
Format string vulnerability in crontab for SCO OpenServer 5.0.5 and 5.0.6 allows local users to gain privileges via format string specifiers in the file name argument...
SRT Security Advisory (SRT2002-06-04-1711): SCO crontab
====================================================================== Strategic Reconnaissance Team Security Advisory SRT2002-06-04-1611 Topic : SCO OpenServer crontab format string vulnerability Date : June 04, 2002 Credit : KF dotslashatsnosoft.com Site : http://www.snosoft.com...
OpenServer crontab format string bug
Format string bug in command line arguments parsing...
OpenBSD 2.9/3.0 - Default Crontab Root Command Injection
/ source: https://www.securityfocus.com/bid/4495/info OpenBSD ships with a number of cron jobs configured by default. The tasks are for the purpose of summarizing system information. The mail1 utility is used to send the summaries to the root user. This utility supports escaped characters in...
CVE-2001-0559
The CVE-2001-0559 issue affects Vixie cron up to 3.0.1. crontab fails to drop privileges correctly after a failed parsing of a modification operation, potentially enabling a local attacker to gain additional privileges when an editor is invoked to fix the error. Publicly documented references (De...
CVE-2001-0685
CVE-2001-0685 concerns FCron prior to 1.1.1 where a local user can corrupt another user’s crontab via a symlink attack on the fcrontab temp file. No additional technical details are provided in the supplied connected documents.
CVE-2001-0685
Thibault Godouet FCron prior to 1.1.1 allows a local user to corrupt another user's crontab file via a symlink attack on the fcrontab temporary file...
CVE-2001-0685: Undefined Security Weakness
Thibault Godouet FCron prior to 1.1.1 allows a local user to corrupt another user's crontab file via a symlink attack on the fcrontab temporary file...
CVE-2001-0559: Undefined Security Weakness
crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error...