333 matches found
CVE-2008-5110
syslog-ng does not call chdir when it calls chroot, which might allow attackers to escape the intended jail. NOTE: this is only a vulnerability when a separate vulnerability is present. This flaw affects syslog-ng versions prior to and including 2.0.9...
FreeBSD Security Advisory (FreeBSD-SA-07:01.jail.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-07:01.jail.asc ADV FreeBSD-SA-07:01.jail.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...
FreeBSD Ports: rssh
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Security Advisory (FreeBSD-SA-05:17.devfs.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:17.devfs.asc ADV FreeBSD-SA-05:17.devfs.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft...
FreeBSD Security Advisory (FreeBSD-SA-04:12.jailroute.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:12.jailroute.asc ADV FreeBSD-SA-04:12.jailroute.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008...
FreeBSD Ports: rssh
The remote host is missing an update to the system as announced in the referenced advisory. VID a4815970-c5cc-11d8-8898-000d6111a684 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: rsync
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Security Advisory (FreeBSD-SA-05:17.devfs.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:17.devfs.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
FreeBSD Security Advisory (FreeBSD-SA-04:12.jailroute.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:12.jailroute.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
FreeBSD Jail rc.d脚本多个本地符号链接漏洞
FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 jail2系统调用允许系统管理员将进程及其所有子代锁定在一个环境中，这样即使进程拥有超级用户权限，也只能对该环境外的系统造成很有限的影响。由于对可能的符号链接缺少处理，主机的jail rc.d8脚本受符号链接攻击的影响。通过用符号链接替换牢笼中的/var/log/console.log，牢笼中的超级用户（root）就可能使用任意内容覆盖牢笼外主机系统上的任意文件。这可能导致以不受禁锢的超级用户权限执行任意命令。...
FreeBSD jail rc.d symbolic links problem
Multiple conditions allow to write files begind jailed environment, as an example symbolic link /var/log/console.log...
FreeBSD Security Advisory FreeBSD-SA-07:01.jail
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-07:01.jail Security Advisory The FreeBSD Project Topic: Jail rc.d script privilege escalation Category: core Module: etcrc.d Announced: 2007-01-11 Credits: Dirk...
CVE-2007-0166
The jail rc.d script in FreeBSD 5.3 up to 6.2 does not verify pathnames when writing to /var/log/console.log during a jail start-up, or when file systems are mounted or unmounted, which allows local root users to overwrite arbitrary files, or mount/unmount files, outside of the jail via a symlink...
CVE-2007-0166
Summary: CVE-2007-0166 affects FreeBSD’s jail rc.d script. In FreeBSD 5.3 through 6.2, the host jail rc.d script did not verify pathnames when writing jail startup output to /var/log/console.log or when mounting/unmounting files, enabling a local root attacker inside the jail to overwrite host fi...
FreeBSD-SA-07:01.jail
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-07:01.jail Security Advisory The FreeBSD Project Topic: Jail rc.d script privilege escalation Category: core Module: etcrc.d Announced: 2007-01-11 Credits: Dirk...
FreeBSD -- Jail rc.d script privilege escalation
Problem Description: In multiple situations the host's jail rc.d8 script does not check if a path inside the jail file system structure is a symbolic link before using the path. In particular this is the case when writing the output from the jail start-up to /var/log/console.log and when mounting...
CVSTrac chdir() chroot jail escape
The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version contains a flaw related to the chdir function that may allow an attacker to escape the chroot jail. An attacker, exploiting this flaw, would be able to access files outside of the web...
CVSTrac chdir() chroot jail escape
The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version contains a flaw related to the chdir function that may allow an attacker to escape the chroot jail. An attacker, exploiting this flaw, would be able to access files outside of the web...
FreeBSD Security Advisory FreeBSD-SA-05:17.devfs
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:17.devfs Security Advisory The FreeBSD Project Topic: devfs ruleset bypass Category: core Module: devfs Announced: 2005-07-20 Credits: Robert Watson Affects: A...