Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via improper validation of symbolic links in the virt-handler process. An attacker can gain unauthorized access to privileged Unix sockets on the host by replacing a virtual machine console socket with a symlink to a...

Informix SE-7.25 /lib/sqlexec Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Title: Local Vulnerability in Informix SE-7.25 Date: 21-04-2002 Platform: Only tested in Linux but can be exported to others. Impact: Users with exec perm over /lib/sqlexec can obtain euid=0 Author: Juan Manuel Pascual Escriba [email protected] Status: Vendor...