Lucene search
+L

1 matches found

securityvulns
securityvulns
added 2012/10/15 12:0 a.m.32 views

utempter allows fake host setting

Quoting from http://bugs.debian.org/689562 Utempter does not cannot? verify the setting of host, so it can easily be faked. This may affect any software that depend on utmp correctness. Demo of the issue: psz@bari:$ cat silly.c include sys/types.h include sys/stat.h include fcntl.h include unistd...

0.1AI score
SaveExploits0
Rows per page
Query Builder