Проблема в SSH с Kerberos

При использовании Kerberos-авторизации ticket ползователя хранится в файле "none" текущей директории а не в /tmp. В том случае, когда текущий каталог находится на сетевом дисек, есть вероятность его перехвата при передаче и ксопрометации учетной записи пользователя...

Infosec.20000617.panda.a

Infosec Security Vulnerability Report No: Infosec.20000617.panda.a ============================ Vulnerability Summary --------------------- Problem: Panda Antivirus has an open console at port 2001 Threat: Remotely run any command on a Netware console Platform: Confirmed on Novell Netware Solutio...

Локальный DoS против FreeBSD

Команда dd if=disc image of=/dev/fd0 приводит к перезагрузке системы, если дискета защищена на запись...

Дырка в Secret Disk

На машинах с несколькими мониторами скринсейвер с паролем, запускающийся при изъятии ключа, запускается только на одном мониторе...

Дырка в kcsd под Linux

kcsd использует внешний shell определяемый переменной SHELL, которая задается пользователем. Таким образом, подменив SHELL можно получить привелегии группы disk, позволяющие менять разрешения любых файлов...

KDE 1.11.1.11.22.0 kscd - SHELL Environmental Variable

KDE 1.11.1.11.22.0 kscd - SHELL Environmental Variable source: https://www.securityfocus.com/bid/1206/info Some linux distributions S.u.S.E. 6.4 reported ship with kscd a CD player for the KDE Desktop sgid disk. kscd uses the contents of the 'SHELL' environment variable to execute a browser. This...

CVE-2000-0112

The default installation of Debian GNU/Linux uses an insecure Master Boot Record MBR which allows a local user to boot from a floppy disk during the installation...

CVE-2000-0112

Technical details for CVE-2000-0112 are not publicly available in the provided documents. The description notes an insecure Debian MBR issue, but no confirmable affected products, versions, impact, or mitigations are present here. Monitor for updates.

CVE-1999-0594

A Windows NT system does not restrict access to removable media drives such as a floppy disk drive or CDROM drive...

CVE-2000-0112

The default installation of Debian GNU/Linux uses an insecure Master Boot Record MBR which allows a local user to boot from a floppy disk during the installation...

CVE-2000-0030

Solaris dmispd dmicmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database...

Solaris 7.0 - DMI Denial of Service

source: https://www.securityfocus.com/bid/878/info DMI is the Desktop Management Interface, and is a suite of application management programs shipped with Sun's Solaris. Each application that is managed through DMI has a MIF record which contains information about its managable components and...

cdda2cdr_bof.txt

Greetings, There is a buffer overflow vulnerability in cdda2cdr distributed with at least package cdwtools-0.93-78. This program is sgid disk by default and thus any malicious user who gains disk privs will have r/w access to your entire hard drives in the form of /dev/hd. This is obviously a qui...

CVE-1999-0313

diskbandwidth on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames...

CVE-1999-0466

NetBSD 1.3.3 and earlier are affected by CVE-1999-0466 via the SVR4 /dev/wabi special device file, which allows a local user to read or write arbitrary files on the disk associated with that device due to improper access. Connected documents confirm the same description across Red Hat security ad...

wwwboard-bomb.txt

WWWBoard v2.0 ALPHA Vulnerability Recently, many vulnerabilities have been found in the popular WWWBoard script written by Matt Wright, this is yet another. When the followup value in a form posted to the WWWBoard script contains the same post number twice, the script follows up to that post twic...

sendmail-8.9.1.txt

Date: Thu, 9 Jul 1998 19:31:52 +0200 From: Michal Zalewski Subject: Sendmail up to 8.9.1 - mail.local instroduces new class of bugs Local, setuid mail delivery program included in recent packages - mail.local - introduces new class of local bugs, from DoS attacks to security compromises. For...

fwb.txt

Document: L0phT Security Advisory URL Origin: http://www.l0pht.com/advisories.html Release Date: October 30, 1998 Special PumpCon Release Application: FWB Hard Disk Toolkit 2.5 Severity: Users can bypass hard disk driver level passwords Author: Space Rogue [email protected] Operating System: Mac...

sendmail.8.9.1.DoS.txt

Date: Thu, 1 Apr 1999 14:00:16 +0000 From: Lukasz Luzar To: [email protected] Subject: Possible local DoS in sendmail Hi, It seems that sendmail ran with -t option does NOT block SIGINT ... In that moment while we are sending data to its stdin, when we will press CTRL-C process is being killed...

OmniHTTPd visadmin.exe Malformed URL DoS

It is possible to fill the hard disk of a server running OmniHTTPd by issuing the request : http://omni.server/cgi-bin/visadmin.exe?user=guest This allows an attacker to crash your web server. This script checks for the presence of the faulty CGI, but does not execute it. %NASLMINLEVEL 70300 C...