QNX 6.5.0 x86 phfont - Local Privilege Escalation

/ QNX 6.5.0 x86 phfont local root exploit by cenobyte 2013 - vulnerability description: Setuid root /usr/photon/bin/phfont on QNX is prone to a buffer overflow. The vulnerability is due to insufficent bounds checking of the PHOTONHOME environment variable. - vulnerable platforms: QNX 6.5.0SP1 QNX...

CVE-2013-6891

lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf...

CVE-2013-6891: Improper Link Resolution Before File Access

lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf...

PT-2014-3215

Name of the Vulnerable Software and Affected Versions CUPS versions prior to 1.7.1 Description The issue allows local users to read portions of arbitrary files through a modified HOME environment variable and a symlink attack involving the .cups/client.conf file. This occurs when the software is...

Code injection

zypp-refresh-wrapper in SUSE Zypper before 1.3.20 and 1.6.x before 1.6.166 allows local users to create files in arbitrary directories, or possibly have unspecified other impact, via a pathname in the ZYPPLOCKFILEROOT environment variable...

Android Superuser mention the right vulnerability analysis-vulnerability warning-the black bar safety net

Recently, foreign security researchers uncover more Android platform under the authorization Application Management Software there are 3 security vulnerabilities, exploit the vulnerabilities may be the root mention the right, see the link: is. TSRC also for this 3 Android Superuser mention the...

CVE-2013-1060

A certain Ubuntu build procedure for perf, as distributed in the Linux kernel packages in Ubuntu 10.04 LTS, 12.04 LTS, 12.10, 13.04, and 13.10, sets the HOME environment variable to the buildd directory and consequently reads the system configuration file from the buildd directory, which allows...

CVE-2013-1060: Undefined Security Weakness

A certain Ubuntu build procedure for perf, as distributed in the Linux kernel packages in Ubuntu 10.04 LTS, 12.04 LTS, 12.10, 13.04, and 13.10, sets the HOME environment variable to the buildd directory and consequently reads the system configuration file from the buildd directory, which allows...

ibstat $PATH Privilege Escalation

This module exploits the trusted $PATH environment variable of the SUID binary "ibstat". Module Options msf use exploit/aix/local/ibstat/path msf undefinedpath show actions ...actions... msf undefinedpath set ACTION msf undefinedpath show options ...show and set options... msf undefinedpath run...

PT-2013-2848

Name of the Vulnerable Software and Affected Versions Ubuntu versions 10.04 LTS, 12.04 LTS, 12.10, 13.04, and 13.10 Description The issue concerns a Ubuntu build procedure for perf, distributed in Linux kernel packages. It sets the HOME environment variable to the buildd directory, causing the...

CVE-2013-4874

The Uboot bootloader on the Verizon Wireless Network Extender SCS-26UC4 allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify the ramboot environment variable...

CVE-2013-4874

The Uboot bootloader on the Verizon Wireless Network Extender SCS-26UC4 allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify the ramboot environment variable...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in Cisco Unified Communications Manager CUCM 7.1x through 9.11a allow local users to gain privileges by leveraging unspecified file-permission and environment-variable issues for privileged programs, aka Bug ID CSCuh73454...

PT-2013-4360

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 7.1x through 9.11a Description The issue is related to multiple untrusted search path vulnerabilities that allow local users to gain privileges. This is achieved by leveraging unspecified...

CVE-2013-3434

Untrusted search path vulnerability in Cisco Unified Communications Manager CUCM 7.1x through 9.11a allows local users to gain privileges by leveraging unspecified file-permission and environment-variable issues for privileged programs, aka Bug ID CSCui02242...

PT-2013-4388

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 7.1x through 9.11a Description The issue is related to an untrusted search path vulnerability that allows local users to gain privileges. This is achieved by leveraging unspecified file-permission...

PT-2013-4389

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 7.1x through 9.11a Description The issue allows local users to gain privileges by leveraging unspecified file-permission and environment-variable issues for privileged programs. Recommendations For...

CVE-2013-4874: Improper Authentication

The Uboot bootloader on the Verizon Wireless Network Extender SCS-26UC4 allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify the ramboot environment variable...

CVE-2013-3433: Undefined Security Weakness

Untrusted search path vulnerability in Cisco Unified Communications Manager CUCM 7.1x through 9.11a allows local users to gain privileges by leveraging unspecified file-permission and environment-variable issues for privileged programs, aka Bug ID CSCui02276...

Apple iOS ‘openSharedCacheFile’函数基于栈的缓冲区溢出漏洞

CVE-2013-3950 Apple iOS是美国苹果（Apple）公司为移动设备所开发的操作系统。支持的设备包括iPhone、iPod Touch、iPad、Apple TV。 Apple iOS 5.1.x版本和6.x至6.1.3版本中的dyld中的dyld.cpp中的‘openSharedCacheFile’函数中存在基于栈的缓冲区溢出漏洞。攻击者可通过DYLDSHAREDCACHEDIR环境变量中较长的字符串利用该漏洞实施越狱攻击。 0 Apple iOS 5.1.x Apple iOS 6.x Apple iOS 6.1.3...