2021 matches found
Linux - chmod/etc/shadow, 0666 & exit 33 bytes
Linux - chmod/etc/shadow, 0666 & exit - 33 bytes. Shellcode exploit for linx86 platform include / linux/x86 ; chmod/etc/shadow, 0666 & exit 33 bytes written by ka0x - lun sep 21 17:13:25 CEST 2009 greets: an0de, Piker, xarnuz, NullWave07, Pepelux, JosS, sch3m4, Trancek and others! / int main char...
Misconfigured /etc/passwd file may share folders unexpectedly
Description If a user in /etc/passwd is misconfigured to have an empty home directory :: and the automated homes share is enabled, or an explicit share is created with that username, then any client connecting to that share name will be able to access the whole filesystem from root / on downwards...
Fedora 10 : proftpd-1.3.2a-5.fc10 (2009-9386)
This update has a large number of changes from previous Fedora packages; the highlights are as follows: - Update to upstream release 1.3.2a - Fix SQL injection vulnerability at login 485125, CVE-2009-0542 - Fix SELinux compatibility 498375 - Fix audit logging 506735 - Fix default configuration...
SuSE9 Security Update : permissions and filesystem (YOU Patch Number 10539)
It is technically impossible to change permissions files in of world writeable directories that don't have the sticky bit set in a secure way. This update therefore removes /var/lib/xmcd/discog from /etc/permissions. Furthermore permissions handling of files below /var/games is removed. To be abl...
SuSE9 Security Update : permissions (YOU Patch Number 10815)
It is technically impossible to change permissions files in of world writeable directories that don't have the sticky bit set in a secure way. This update therefore removes /var/lib/xmcd/discog from /etc/permissions. Furthermore permissions handling of files below /var/games is removed. To be abl...
Low: Red Hat Security Advisory: nfs-utils security and bug fix update
An updated nfs-utils package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nfs-utils package provides a daemon for the kernel NFS server and related tools. It was discovered that...
linux/x86 - killall5 polymorphic shellcode 61 bytes
linux/x86 killall5 polymorphic shellcode 61 bytes. Shellcode exploit for linx86 platform / Title: Linux x86 | Polymorphic Shellcode killall5 - 61 bytes Author: Jonathan Salwan Mail: submit ! shell-storm.org ! DataBase of shellcode == http://www.shell-storm.org/shellcode/ killall5 is the SystemV...
PunBB Reputation.php Mod 2.0.4 - Local File Inclusion
PunBB Reputation.php Mod 2.0.4 - Local File Inclusion !/usr/bin/perl 0-Day PunBB Reputation.php Mod 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!; sub LocalFileInclusion my $Directory,$Command = @; return "./include/reputation/repprofile.php?punuserlanguage=$Directory$Command%00...
DJ Calendar (DJcalendar.cgi TEMPLATE) File Disclosure Vuln
Exploit for cgi platform in category web applications ========================================================== DJ Calendar DJcalendar.cgi TEMPLATE File Disclosure Vuln ========================================================== Discovered by cibbao PoC:...
DJ Calendar - 'DJcalendar.cgi TEMPLATE' File Disclosure
Discovered by cibbao PoC: /cgi-bin/DJcalendar.cgi?TEMPLATE=/../../../../../../../etc/passwd milw0rm.com 2009-07-14...
linux/x86 Shellcode Polymorphic chmod("/etc/shadow",666) 54 bytes
No description provided by source. / Title : Linux/x86 - Shellcode Polymorphic chmod"/etc/shadow",666 & exit - 54 bytes Encode : ADD Author : Jonathan Salwan Mail : submit ! shell-storm.org ! Database of shellcodes = http://www.shell-storm.org/shellcode/ Informations chmod & exit:...
Gravy Media Photo Host 1.0.8 Local File Disclosure Vulnerability
No description provided by source. ================================================================== =========Gravy Media Photo Host 1.0.8 Local File Inclusion======== ================================================================== Vendor:http://www.gravy-media.com/ Download:register to...
linux/x86 Shellcode Polymorphic chmod("/etc/shadow",666) 54 bytes
Exploit for linux/x86 platform in category shellcode ================================================================= linux/x86 Shellcode Polymorphic chmod"/etc/shadow",666 54 bytes ================================================================= / Title : Linux/x86 - Shellcode Polymorphic...
linux/x86 Shellcode Polymorphic chmod(""/etc/shadow"" 666) 54 bytes
No description provided by source. / Title : Linux/x86 - Shellcode Polymorphic chmod"/etc/shadow",666 & exit - 54 bytes Encode : ADD Author : Jonathan Salwan Mail : submit ! shell-storm.org ! Database of shellcodes = http://www.shell-storm.org/shellcode/ Informations chmod & exit:...
linux/x86 Shellcode Polymorphic chmod"/etc/shadow",666 54 bytes
linux/x86 Shellcode Polymorphic chmod"/etc/shadow",666 54 bytes. Shellcode exploit for linx86 platform / Title : Linux/x86 - Shellcode Polymorphic chmod"/etc/shadow",666 & exit - 54 bytes Encode : ADD Author : Jonathan Salwan Mail : submit ! shell-storm.org ! Database of shellcodes =...
CVE-2009-1699: Improper Restriction of XML External Entity Reference
The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle XML external entities, which allows remote attackers to read arbitrary files via a crafted DTD, as demonstrated by a...
Solaris Update for /etc/security/bsmunconv 111070-01
Check for the Version of /etc/security/bsmunconv OpenVAS Vulnerability Test Solaris Update for /etc/security/bsmunconv 111070-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...
Solaris Update for /etc/security/bsmunconv 111070-01
Check for the Version of /etc/security/bsmunconv OpenVAS Vulnerability Test Solaris Update for /etc/security/bsmunconv 111070-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...
Sun Solaris sadmind守护程序多个远程溢出漏洞
BUGTRAQ ID: 35083 CVECAN ID: CVE-2008-3869,CVE-2008-3870 Solaris是一款由Sun开发和维护的商业UNIX操作系统。 Solaris的sadmind守护程序在为入站的sadmind请求分配内存时存在整数溢出，在解码某些请求参数时存在堆溢出。如果远程攻击者提交了畸形的RPC请求的话，就可以触发这些溢出，导致以root用户权限执行任意代码。 Sun Solaris 9.0x86 Sun Solaris 9.0 Sun Solaris 8.0x86 Sun Solaris 8.0 临时解决方法： 如下禁用sadmind1M： 1...
