172 matches found
BRS WebWeaver 1.0 1 MKDir Directory Traversal Weakness
No description provided by source. source: http://www.securityfocus.com/bid/6585/info WebWeaver's FTP component has a flaw which can permit a remote user to create directories outside the FTP root. By executing the mkdir command on an ftp server with dot-dot-slash ..\ directory traversal notation...
linux/x86 mkdir() 'haxor' and exit() Shellcode - 39 bytes
/ ; Title: mkdir 'haxor' and exit Shellcode - 39 bytes ; Platform: linux/x8664 ; Date: 2014-06-26 ; Author: Osanda Malith Jayathissa @OsandaMalith section .text global start start: jmp callshellcode shellcode: pop rsi xor rax, rax mov al, 0x53 mov rdi, rsi mov si, 0x1ed syscall xor rax, rax add...
Fedora 17 : proftpd-1.3.4b-5.fc17 (2013-0483)
Jann Horn reported that there is a possible race condition in the handling of the MKD/XMKD FTP commands, when the UserOwner directive is involved, and the attacker is on the same physical machine as a running proftpd. This race applies to modsftp and the handling of the MKDIR SFTP request as well...
DEBIAN-CVE-2012-6063
Double free vulnerability in the sftpmkdir function in sftp.c in libssh before 0.5.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors, a different vector than CVE-2012-4559...
IMCE Mkdir <= Remote File Upload Vulnerability
Exploit for php platform in category web applications Exploit Title: IMCE Mkdir == Remote File Upload Vulnerability Date: 27/06/2012 Author: Ryuzaki Lawlet Web/Blog: http://justryuz.blogspot.com Category: webapps version: - Vendor or Software Link: http://drupal.org/project/imcemkdir Google dork:...
IMCE Mkdir Shell Upload
Exploit Title: IMCE Mkdir == Remote File Upload Vulnerability Date: 27/06/2012 Author: Ryuzaki Lawlet Web/Blog: http://justryuz.blogspot.com Category: webapps version: - Vendor or Software Link: http://drupal.org/project/imcemkdir Google dork: inurl:"/imce?dir=" intitle:"File Browser" Tested on:...
TPSparkyRoot
A bug in chmod, mkdir and chown mean that they fail when the last element of their target path is a symlink...
WordPress Plugin Zingiri 2.2.3 - ajax_save_name.php Remote Code Execution
WordPress Plugin Zingiri 2.2.3 - ajaxsavename.php Remote Code Execution get; 41. ifremoveTrailingSlash$sessionAction-getFolder == getParentPath$POST'id' && sizeof$selectedDocuments 42. 43. if$key = arraysearchbasename$POST'id', $selectedDocuments !== false 44. 45...
Novell Netware FTP server buffer overflow
rmdir/mkdir/dele commands buffer overflow...
TurboFTP FTP Server directory traversal
Directory traversal via mkdir and move command...
CVE-2010-0105
The hfs implementation in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 supports hard links to directories and does not prevent certain deeply nested directory structures, which allows local users to cause a denial of service filesystem corruption via a crafted application that calls the mkdir a...
linux/x86 break chroot 87 bytes
Exploit for linux/x86 platform in category shellcode =============================== linux/x86 break chroot 87 bytes =============================== bt:/ ./pwn perl -e 'print "\x90"x181...
Linux/x86 - mkdir(hacked) + exit() Shellcode (36 bytes)
Linux/x86 - mkdirhacked + exit Shellcode 36 bytes. Shellcode exploit for Linuxx86 platform The comment in that file is not correct.. I cut and pasted the shell code in an existing c source and forgot to adjust it.. / This shellcode will do a mkdir of 'hacked' and then an exit Written by...
HP-UX Security Patch : PHCO_35929
mkdir1 cumulative patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26329; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/11";...
HP-UX mkdir工具本地非授权访问漏洞
HP-UX是一款HP公司开发的UNIX操作系统。 HP-UX的mkdir工具实现上存在漏洞，本地用户可以利用此漏洞在系统中获得非授权访问。 HP HP-UX B.11.23 HP HP-UX B.11.11 HP HP-UX B.11.04 HP HP-UX B.11.00 HP已经为此发布了一个安全公告（HPSBUX02128）以及相应补丁: HPSBUX02128：SSRT5996 - rev.1 HP-UX mkdir1 Local Unauthorized Access...
UNIX 7th Edition /bin/mkdir Local Buffer Overflow Exploit
No description provided by source. / Exploit for /bin/mkdir Unix V7 PDP-11. mkdir has a buffer overflow when checking if the directory in /arg/with/slashes/fname exists. This will run /bin/sh with euid 0, but not uid 0. Since the shell doesn't do anything special about this, we don't really care...
CVE-2006-5178
Race condition in the symlink function in PHP 5.1.6 and earlier allows local users to bypass the openbasedir restriction by using a combination of symlink, mkdir, and unlink functions to change the file path after the openbasedir check and before the file is opened by the underlying system, as...
FreeBSD : php -- open_basedir Race Condition Vulnerability (edabe438-542f-11db-a5ae-00508d6a62df)
Stefan Esser reports : PHP's openbasedir feature is meant to disallow scripts to access files outside a set of configured base directories. The checks for this are placed within PHP functions dealing with files before the actual open call is performed. Obviously there is a little span of time...
HP-UX PHCO_32036 : HPSBUX02128 SSRT5996 - rev.1 HP-UX mkdir(1) Local Unauthorized Access
s700800 11.11 mkdir1 cumulative patch : A potential security vulnerability has been identified with HP-UX. The vulnerability could be exploited by a local user to gain unauthorized access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin we...