10114 matches found
Default configuration
The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as...
CVE-2011-1550
The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as...
CVE-2011-1549
The default configuration of logrotate on Gentoo Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated by...
CVE-2011-1548
The default configuration of logrotate on Debian GNU/Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated...
CVE-2011-1549
Summary (CVE-2011-1549) : The issue concerns the default logrotate configuration on Gentoo Linux, which runs with root privileges to process files in directories that can be written by non-root users. This enables local attackers to perform symlink and hard-link attacks by exploiting logrotate’s ...
CVE-2011-1550
The CVE concerns logrotate on SUSE openSUSE Factory configured by default to process files in directories that permit non-root write access, using root privileges. This enables local users to perform symlink and hard link attacks due to logrotate’s lack of support for untrusted directories. Concr...
CVE-2011-1548
The default configuration of logrotate on Debian GNU/Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated...
CVE-2011-1548
The default configuration of logrotate on Debian GNU/Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated...
Cyber Attacks Hit Nearly 40 South Korean websites !
According to a new report, 40 South Korean websites came under a cyber crime attack by a computer virus, including the presidential Blue House, South Korea's biggest bank , a major online auction house, the Foreign Ministry, the two largest search engines in the country and Korean military websit...
Analysis of PHP programs in the directory traversal vulnerability-vulnerability warning-the black bar safety net
| The depths of winter and the eve of Directory traversalvulnerabilityboth at home and abroad have many different names,for example, can also be called information leakagevulnerability,non-authorized files contains avulnerability. The name though,but they have a common Genesis,is in the program n...
Beware : Google illegally collected private info !
Police confirmed Thursday that Google, the world's largest online search engine operator, illegally collected and stored personal data sent over unsecured Wi-Fi wireless networks here while creating the localized version of its online mapping service. Korea and 15 other countries, including the...
White House E-Card Scam Part of Larger Zeus-Related Attack !
The simplistic spam campaign that hit around Christmas and purported to be a holiday greeting from the White House not only included a piece of Zeus-related malware that searches hard drives for documents and uploads them to a remote server, but also appears to be connected to a similar attack fr...
hddtemp-info NSE Script
Reads hard disk information such as brand, model, and sometimes temperature from a listening hddtemp service. Example Usage nmap -p 7634 -sV -sC Script Output 7634/tcp open hddtemp | hddtemp-info: | /dev/sda: WDC WD2500JS-60MHB1: 38 C Requires comm math shortport string stringaux table local comm...
Be Alert : "Postcard" computer virus is Out ~~ !!
WARNINGS have been issued this weekend about a highly destructive computer virus which has been released under the guise of a postcard greeting. It is strongly advised that computer users should not open any message with an attachment entitled "Postcard" or "Postcard from Hallmark", regardless of...
CVE-2010-4173
The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a 1 symlink or 2 hard link attack on the libsdp.log. temporary file...
Default configuration
The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a 1 symlink or 2 hard link attack on the libsdp.log. temporary file...
UBUNTU-CVE-2010-4173
The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a 1 symlink or 2 hard link attack on the libsdp.log. temporary file...
CVE-2010-4173
The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a 1 symlink or 2 hard link attack on the libsdp.log. temporary file...
CVE-2010-4173
The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a 1 symlink or 2 hard link attack on the libsdp.log. temporary file...
CVE-2010-4173
CVE-2010-4173 affects libsdp; the default libsdp.conf configuration for/libsdp 1.1.104 and earlier creates log files in /tmp, enabling local users to overwrite arbitrary files via a symlink or hard link attack on the libsdp.log.##### temporary file. The connected sources consistently describe ins...