Buffer overflow

Buffer overflow in crontab in IBM AIX 5.2 allows local users to gain privileges via long command line arguments...

CVE-2007-4621

CVE-2007-4621 describes a local privilege escalation in IBM AIX 5.2 via a buffer overflow in the crontab main function when copying user-supplied command line arguments into a fixed-size BSS buffer. Successful exploitation allows an attacker to execute arbitrary code with root privileges, requiri...

CVE-2007-4621

Buffer overflow in crontab in IBM AIX 5.2 allows local users to gain privileges via long command line arguments...

CVE-2007-4621: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in crontab in IBM AIX 5.2 allows local users to gain privileges via long command line arguments...

IBM AIX Crontab本地权限提升漏洞

BUGTRAQ ID: 26263 CVECAN ID: CVE-2007-4621 IBM AIX是一款商业性质的UNIX操作系统。 IBM AIX的crontab程序的主函数中存在缓冲区溢出漏洞，本地攻击者可能利用此漏洞提升权限。 在处理命令行参数时，crontab程序未经执行边界检查便将用户提供的参数拷贝到了固定大小的BSS缓冲区，因此攻击者可以覆盖BSS内存区域中所存储的大部分数据，导致以root权限执行任意指令。 IBM AIX 5.2 临时解决方法： 删除crontab程序的set-uid位。 厂商补丁： IBM ---...

iDefense Security Advisory 10.30.07: IBM AIX 5.2 crontab BSS Buffer Overflow Vulnerability

IBM AIX 5.2 crontab BSS Buffer Overflow Vulnerability iDefense Security Advisory 10.30.07 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 30, 2007 I. BACKGROUND The crontab program is a user utility that enables users to create, remove, and edit cron jobs. The cron jobs will then later...

HP-UX Security Patch : PHCO_24702

cumulative crontab/at/cron patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26237; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/11";...

HP-UX Security Patch : PHCO_27141

cumulative crontab/at/cron patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26254; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/11";...

CVE-2007-3306

CVE-2007-3306 describes a PHP remote file inclusion in MiniBill 1.2.5. The flaw is in crontab/run_billing.php where an attacker can cause arbitrary PHP code execution by supplying a URL in the config[include_dir] parameter. The connected documents corroborate MiniBill 1.2.5 as affected and point ...

MiniBill 1.2.5 - 'run_billing.php' Remote File Inclusion

======================================================= MiniBill 2007-04-09 v1.2.5 Remote File include Vulnerabilities ======================================================= Found By : Abo0od , [email protected] ======================================================= Homepage:...

MiniBill 1.2.5 - run_billing.php Remote File Inclusion

MiniBill 1.2.5 - runbilling.php Remote File Inclusion ======================================================= MiniBill 2007-04-09 v1.2.5 Remote File include Vulnerabilities ======================================================= Found By : Abo0od , [email protected]...

RHEL 3 / 4 / 5 : vixie-cron (RHSA-2007:0345)

Updated vixie-cron packages that fix a denial of service issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The vixie-cron package contains the Vixie version of cron. Cron is a standard UNIX daemon that runs specified...

Hack advanced skills Linux back door technology and practice-vulnerability warning-the black bar safety net

The back door introduction The intruder complete control of the system, to facilitate the next time you enter and use a technology. Generally by modifying system configuration files and installation of third-party back-door tool to achieve. Has a hidden, can bypass the system log, not easy to be...

CVE-2007-1227

VShieldCheck in McAfee VirusScan for Mac Virex before 7.7 patch 1 allow local users to change permissions of arbitrary files via a symlink attack on /Library/Application Support/Virex/VShieldExclude.txt, as demonstrated by symlinking to the root crontab file to execute arbitrary commands...

CVE-2007-1227: Undefined Security Weakness

VShieldCheck in McAfee VirusScan for Mac Virex before 7.7 patch 1 allow local users to change permissions of arbitrary files via a symlink attack on /Library/Application Support/Virex/VShieldExclude.txt, as demonstrated by symlinking to the root crontab file to execute arbitrary commands...

MOAB-28-01-2007.rb.txt

!/usr/bin/ruby Copyright c 2007 Kevin Finisterre Lance M. Havok All pwnage reserved. 1 Stop crashdump from writing to /Library/Logs via chmod 000 /Library/Logs/CrashReporter 2 Make symlink to /Library/Logs/CrashReporter/knownprog.crash.log 3 Create a program with a modified LINKEDIT segment that...

Mac OS X 10.4.8 (8L2127) crashdump Privilege Escalation Exploit

Exploit for macOS platform in category local exploits =============================================================== Mac OS X 10.4.8 8L2127 crashdump Privilege Escalation Exploit =============================================================== !/usr/bin/ruby Copyright c 2007 Kevin Finisterre Lanc...

Apple Mac OSX 10.4.8 (8L2127) - crashdump Local Privilege Escalation

Apple Mac OSX 10.4.8 8L2127 - crashdump Local Privilege Escalation !/usr/bin/ruby Copyright c 2007 Kevin Finisterre Lance M. Havok All pwnage reserved. 1 Stop crashdump from writing to /Library/Logs via chmod 000 /Library/Logs/CrashReporter 2 Make symlink to...

MOAB-05-01-2007_cron.rb.txt

!/usr/bin/ruby c 2006 LMH code from the other exploit, porting Kevin Finisterre crontab rock and roll Second exploit for MOAB-05-01-2007, uses crontab. much more simple than the other one. And works like a charm. require 'fileutils' EVILCOMMANDS = "rm...

Mac OS X 10.4.8 DiskManagement BOM (cron) Privilege Escalation Exploit

No description provided by source. !/usr/bin/ruby c 2006 LMH lmh at info-pull.com code from the other exploit, porting Kevin Finisterre kflists at digitalmunition.com crontab rock and roll Second exploit for MOAB-05-01-2007, uses crontab. much more simple than the other one...