EUVD-2011-1089

Malware in sbrugna...

EUVD-2011-1090

Malware in sbrugna...

CVE-2011-1075

FreeBSD's crontab calculates the MD5 sum of the previous and new cronjob to determine if any changes have been made before copying the new version in. In particular, it uses the MD5File function, which takes a pathname as an argument, and is called with euid 0. A race condition in this process ma...

Re: [ Hackerslab bug_paper ] HP-UX crontab temporary file symboliclink vulnerability

Hi, Tested on 4.0-RELEASE FreeBSD 4.0-RELEASE 9 4.1-RELEASE FreeBSD 4.1-RELEASE 1: Can read any file wich start with comment simbol $ ls -l /etc/sudoers -r-------- 1 root wheel 313 24 oct 20:20 /etc/sudoers $ id uid=1002alf gid=1002alf groups=1002alf $ crontab -e /tmp/crontab.hLmjTbK417 :!sh Make...