security flaw

crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink. NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235...

Low: Red Hat Security Advisory: vixie-cron security update

An updated vixie-cron package that fixes various bugs and a security issue is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The vixie-cron package contains the Vixie version of cron. Cron is a standard UNIX daemon that runs specifie...

Adobe Version Cue 1.0/1.0.1 Local Root Exploit (OSX)

Exploit for macOS platform in category local exploits ==================================================== Adobe Version Cue 1.0/1.0.1 Local Root Exploit OSX ==================================================== !/usr/bin/perl Adobe Version Cue VCNativeOSX: local root exploit. by: vade79/v9...

ViRobot Linux Server addschup Multiple Overflows

The remote host is running ViRobot Linux Server, a commercial anti- virus product for Linux. According to its banner, the installed version of ViRobot Linux Server suffers from a remote buffer overflow vulnerability in its web-based management interface. By passing specially crafted data through...

CVE-2005-1038

crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink. NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235...

vixie_crontab_readfiles-exploit_and_advisory.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Name: vixie-cron Author: Karol Wiêsek Date: Mar 21, 2005 Issue: crontab allows any user to read another users crontabs Description: Crontab is used to create special files used by cron to execute commands at specified dates and times. Details:...

CVE-2005-1038

CVE-2005-1038 affects Vixie cron 4.1 where running cron with -e can be exploited by a local attacker to read other users’ crontab files via a symlink. Connected advisories (RHSA-2005:361, RHSA-2006:0117, SUSE/SUSE‑CRON plugins) indicate fixes in vixie-cron are available and released as security u...

crontab from vixie-cron allows read other users crontabs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Name: vixie-cron Author: Karol Wisek [email protected] Date: Mar 21, 2005 Issue: crontab allows any user to read another users crontabs Description: Crontab is used to create special files used by cron to execute commands at specified dates an...

HP-UX Security patch : PHCO_23455

The remote host is missing HP-UX Security Patch number PHCO23455 . Sec. Vulnerability in crontab1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17055; scriptversion"1.7";...

HP-UX PHCO_22767 : HPSBUX0103-146 Sec. Vulnerability in crontab(1) (rev.1)

s700800 11.00 cumulative crontab/at/cron patch : crontab1 contains a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO22767. The text itself is copyright C Hewlett-Packard Development Compan...

HP-UX Security patch : PHCO_22770

The remote host is missing HP-UX Security Patch number PHCO22770 . Sec. Vulnerability in crontab1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16772; scriptversion"1.7";...

HP-UX Security patch : PHCO_22768

The remote host is missing HP-UX Security Patch number PHCO22768 . Sec. Vulnerability in crontab1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16774; scriptversion"1.7";...

HP-UX Security patch : PHCO_22769

The remote host is missing HP-UX Security Patch number PHCO22769 . Sec. Vulnerability in crontab1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16773; scriptversion"1.7";...

HP-UX PHCO_23429 : HPSBUX0103-146 Sec. Vulnerability in crontab(1) (rev.1)

s700800 11.04 VVOS cumulative crontab/at/cron patch : crontab1 contains a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO23429. The text itself is copyright C Hewlett-Packard Development...

Apple Mac OSX - '.DS_Store' Arbitrary File Overwrite

!/usr/bin/perl OSX Finder DSStore arbitrary file overwrite exploit. root version vade79 - [email protected] fakehalo/realhalo this will create a directory called "xfinder" in your home directory, once the root user has modified that directory using Finder in almost any waysuch as copying a file out ...

Mac OS X DS_Store Arbitrary File Overwrite Exploit

Exploit for macOS platform in category local exploits ================================================== Mac OS X DSStore Arbitrary File Overwrite Exploit ================================================== !/usr/bin/perl OSX Finder DSStore arbitrary file overwrite exploit. root version vade79 -...

Apple Mac OSX - .DS_Store Arbitrary File Overwrite

Apple Mac OSX - .DSStore Arbitrary File Overwrite !/usr/bin/perl OSX Finder DSStore arbitrary file overwrite exploit. root version vade79 - [email protected] fakehalo/realhalo this will create a directory called "xfinder" in your home directory, once the root user has modified that directory using...

Debian DSA-024-1 : cron - local insecure crontab handling

The FreeBSD team has found a bug in the way new crontabs were handled which allowed malicious users to display arbitrary crontab files on the local system. This only affects valid crontab files so it can't be used to get access to /etc/shadow or something. crontab files are not especially secure...

Debian bsdmainutils 6.0.14 - Calendar Information Disclosure

Debian bsdmainutils 6.0.14 - Calendar Information Disclosure // source: https://www.securityfocus.com/bid/11077/info The calendar utility contained in the bsdmainutils package on Debian GNU/Linux systems is reported susceptible to an information disclosure vulnerability. This is due to a lack of...

Debian bsdmainutils 6.0.14 - Calendar Information Disclosure

// source: https://www.securityfocus.com/bid/11077/info The calendar utility contained in the bsdmainutils package on Debian GNU/Linux systems is reported susceptible to an information disclosure vulnerability. This is due to a lack of proper file authorization checks by the application. The...