[Full-disclosure] Cisco Security Advisory: Cisco Unity Express Expired Password Reset Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unity Express Expired Password Reset Privilege Escalation Advisory ID: cisco-sa-20060501-cue http://www.cisco.com/warp/public/707/cisco-sa-20060501-cue.shtml Revision 1.0 For Public Release 2006 May 01 2300 UTC GMT...

iDEFENSE Security Advisory 08.29.05: Adobe Version Cue VCNative Arbitrary Library Loading Vulnerability

Adobe Version Cue VCNative Arbitrary Library Loading Vulnerability iDEFENSE Security Advisory 08.29.05 www.idefense.com/application/poi/display?id=296&type=vulnerabilities August 29, 2005 I. BACKGROUND Adobe Version Cue is a software version tracking system for Adobe products distributed with Ado...

Adobe Version Cue multiple vulnerabilities

Executable files are writable. It's possible to attach user's library to suid executable. Symbolic links problem...

iDEFENSE Security Advisory 08.29.05: Adobe Version Cue VCNative Arbitrary File Overwrite Vulnerability

Adobe Version Cue VCNative Arbitrary File Overwrite Vulnerability iDEFENSE Security Advisory 08.29.05 www.idefense.com/application/poi/display?id=297&type=vulnerabilities August 29, 2005 I. BACKGROUND Adobe Version Cue is a software version tracking system for Adobe products distributed with Adob...

Adobe Version Cue 1.01.0.1 (OSX) - -lib Local Privilege Escalation

Adobe Version Cue 1.01.0.1 OSX - -lib Local Privilege Escalation / Adobe Version Cue VCNativeOSX: local root exploit. dyld by: vade79/v9 [email protected] fakehalo/realhalo Adobe Version Cue's VCNative program allows un-privileged local users to load arbitrary libraries"bundles" while running setuid...

Adobe Version Cue 1.0/1.0.1 (-lib) Local Root Exploit (OSX)

Exploit for macOS platform in category local exploits =========================================================== Adobe Version Cue 1.0/1.0.1 -lib Local Root Exploit OSX =========================================================== / Adobe Version Cue VCNativeOSX: local root exploit. dyld by:...

Adobe Version Cue 1.01.0.1 (OSX) - Local Privilege Escalation

Adobe Version Cue 1.01.0.1 OSX - Local Privilege Escalation !/usr/bin/perl Adobe Version Cue VCNativeOSX: local root exploit. by: vade79/v9 [email protected] fakehalo/realhalo Adobe Version Cue's VCNative program writes data to a log file in the current working directory while running as setuid root...

Adobe Version Cue 1.0/1.0.1 Local Root Exploit (OSX)

Exploit for macOS platform in category local exploits ==================================================== Adobe Version Cue 1.0/1.0.1 Local Root Exploit OSX ==================================================== !/usr/bin/perl Adobe Version Cue VCNativeOSX: local root exploit. by: vade79/v9...

Adobe Version Cue 1.0/1.0.1 (OSX) - '-lib' Local Privilege Escalation

/ Adobe Version Cue VCNativeOSX: local root exploit. dyld by: vade79/v9 [email protected] fakehalo/realhalo Adobe Version Cue's VCNative program allows un-privileged local users to load arbitrary libraries"bundles" while running setuid root. this is done via the "-lib" command-line option. note:...

Adobe Version Cue 1.0/1.0.1 (OSX) - Local Privilege Escalation

!/usr/bin/perl Adobe Version Cue VCNativeOSX: local root exploit. by: vade79/v9 [email protected] fakehalo/realhalo Adobe Version Cue's VCNative program writes data to a log file in the current working directory while running as setuid root. the logfile is formated as /VCNative-.log, which is easily...

CVE-2005-1842

Adobe Version Cue VCNative (VCNative) on Mac OS X (Version Cue 1.0/1.0.1; Creative Suite 1.0/1.3) uses a setuid root VCNative that writes log files with predictable names (e.g., VCNative-[pid].log) in the working directory. This enables a local attacker to perform a symlink attack that can overwr...

CVE-2005-1843

Adobe Version Cue VCNative in Version Cue 1.0/1.0.1 on macOS contains a design error in the -lib option that allows loading arbitrary libraries, leading to arbitrary code execution with root privileges. VCNative is a setuid root component; exploitation is local and requires loading a malicious li...

CVE-2005-1843

VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, allows local users to load arbitrary libraries and execute arbitrary code via the -lib command line argument...

CVE-2005-1842

VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, creates temporary log files with predictable names, which allows local users to modify arbitrary files via a symlink attack...

CVE-2005-1842

VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, creates temporary log files with predictable names, which allows local users to modify arbitrary files via a symlink attack...

[SA16541] Adobe Version Cue VCNative Privilege Escalation

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-1307

The CVE-2005-1307 entry concerns Adobe Version Cue on macOS, where the stopserver.sh and startserver.sh scripts use the current working directory to locate productname.sh. This path-handling flaw allows a local user to trigger execution of arbitrary code by placing scripts in a user-controlled di...

CVE-2005-1307

The 1 stopserver.sh and 2 startserver.sh scripts in Adobe Version Cue on Mac OS X uses the current working directory to find and execute the productname.sh script, which allows local users to execute arbitrary code by copying and calling the scripts from a user-controlled directory...

CVE-2005-1307

The 1 stopserver.sh and 2 startserver.sh scripts in Adobe Version Cue on Mac OS X uses the current working directory to find and execute the productname.sh script, which allows local users to execute arbitrary code by copying and calling the scripts from a user-controlled directory...

un_0wnz_macue.txt

!/usr/bin/perl -w by unl0ck-0xdeadababe http://unl0ck.void.ru http://0xdeadbabe.blackhatz.info ------------------------------------------------- Only for challenge : and Researche pruproses. Distribution: ------------------------------------------------- It's a fuck public code , not private. Fuc...