1234 matches found
CVE-2008-4210: Undefined Security Weakness
fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable...
Linux Kernel 'truncate()'本地特权提升漏洞
BUGTRAQ ID: 31368 CVE ID：CVE-2008-4210 CNCVE ID：CNCVE-20084210 Linux是一款开放源代码的操作系统。 Linux内核'truncate'和'ftruncate'函数存在设计错误，本地攻击者可以利用漏洞提升特权。 当建立文件时，open/creat允许通过模式参数设置setgid位，由于bsdgroups mount选项或在setgid目录中建立文件，用户不属于新文件的组的成员。用户可以使用ftruncate和memory-mapped I/O使新文件成为任意两进制，获得此组的特权，原因是这些操作没有清除setgid位。...
tomcat directory listing issue
Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon ; preceding a filename with a mapped extension, as demonstrated by URLs ending with /;index.jsp and /;help.do...
DSA-1595-1 xorg-server - several vulnerabilities
Bulletin has no description...
tomcat directory listing issue
Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon ; preceding a filename with a mapped extension, as demonstrated by URLs ending with /;index.jsp and /;help.do...
[SECURITY] [DSA 1565-1] New Linux 2.6.18 packages fix several vulnerabilities
---------------------------------------------------------------------- Debian Security Advisory DSA-1565-1 [email protected] http://www.debian.org/security/ dann frazier May 1, 2008 http://www.debian.org/security/faq - ----------------------------------------------------------------------...
DSA-1565-1 linux-2.6 - several vulnerabilities
Bulletin has no description...
CVE-2007-5544
IBM Lotus Notes before 6.5.6, and 7.x before 7.0.3; and Domino before 6.5.5 FP3, and 7.x before 7.0.2 FP1; uses weak permissions Everyone:Full Control for memory mapped files shared memory in IPC, which allows local users to obtain sensitive information, or inject Lotus Script or other character...
CVE-2007-5544: Incorrect Permission Assignment for Critical Resource
IBM Lotus Notes before 6.5.6, and 7.x before 7.0.3; and Domino before 6.5.5 FP3, and 7.x before 7.0.2 FP1; uses weak permissions Everyone:Full Control for memory mapped files shared memory in IPC, which allows local users to obtain sensitive information, or inject Lotus Script or other character...
IBM Lotus Notes / Domino Client Memory Mapped Files Privilege Escalation
The version of Lotus Notes installed on the remote Windows host fails to adequately protect certain memory mapped files used by the application for inter-process communications. In a shared user environment, a local user may be able to leverage this issue to read from these files, leading to...
IBM Lotus Notes multiple security vulnerabilities
Buffer overflow on viewing of different attachment types, information leak between local users thorugh memory mapped files...
SYMSA-2007-013: Lotus Notes Memory Mapped Files Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-013 Advisory Title: Lotus Notes Memory Mapped Files Vulnerability Author: Ollie Whitehouse / [email protected] Release Date: 23-10-20...
ProFTPD 1.x (module mod_tls) Remote Buffer Overflow Exploit
Exploit for linux platform in category remote exploits =========================================================== ProFTPD 1.x module modtls Remote Buffer Overflow Exploit =========================================================== / Anti-modTLS-0day version 2 ProFTPd .. + modtls...
ProFTPD 1.x (module mod_tls) Remote Buffer Overflow Exploit
No description provided by source. / Anti-modTLS-0day version 2 ProFTPd .. + modtls remote-root-0day-exploit main advantages of this exploit: 1 No patched modtls versions yet 2 This is a preauthentication bug 3 Bruteforcing option eheheheee main disadvantages: ...
CVE-2006-3835: Undefined Security Weakness
Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon ; preceding a filename with a mapped extension, as demonstrated by URLs ending with /;index.jsp and /;help.do...
Apache Tomcat < 5.5.17 Remote Directory Listing Vulnerability
No description provided by source. ScanAlert Security Advisory - http://www.scanalert.com Directory Listing in Apache Tomcat 5.x.x Date: 07/21/2006 Vendor: Apache Package: Tomcat Versions: 5.x.x 5.0.28, 5.5.12, 5.5.9, and 5.5.7 . Confirmed Credit: ScanAlert.s Enterprise Services Team. Overview:...
CVE-2006-3202
The ip6savecontrol function in NetBSD 2.0 through 3.0, under certain configurations, does not check to see if IPv4-mapped sockets are being used before processing IPv6 socket options, which allows local users to cause a denial of service crash by creating an IPv4-mapped IPv6 socket with the...
CVE-2006-3202
The ip6savecontrol function in NetBSD 2.0 through 3.0, under certain configurations, does not check to see if IPv4-mapped sockets are being used before processing IPv6 socket options, which allows local users to cause a denial of service crash by creating an IPv4-mapped IPv6 socket with the...
CVE-2006-3202: Undefined Security Weakness
The ip6savecontrol function in NetBSD 2.0 through 3.0, under certain configurations, does not check to see if IPv4-mapped sockets are being used before processing IPv6 socket options, which allows local users to cause a denial of service crash by creating an IPv4-mapped IPv6 socket with the...