CVE-2009-3939: Incorrect Permission Assignment for Critical Resource

The pollmodeio file for the megaraidsas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file...

The command line to change the service startup mode-bug warning-the black bar safety net

Everyone knows starting and stopping services using the command net start servicename and net stop servicename. But how can I in command line set a service's startup status? For example disable it? The system comes with the stuff inside may have, but I didn't study, I only say pstools with the...

BitchX IRC Client Channel Mode Change DoS

Binary data 1860.prm...

hpux.10.20.644.txt

Problem: on HP-UX 10.20 you can change any file on the root partition to mode 644: $ uname -sr HP-UX B.10.20 $ cd /etc/opt/resmon/log $ mv registrar.log registrar.log.orig $ ls -l /.shhistory -rw------- 1 root sys 3316 Sep 20 15:22 /.shhistory $ ln /.shhistory registrar.log $ nc hpux.example.com...

Group-writable executable in OpenLDAP

OpenLDAP installs the ud binary in $binpath with mode 775 and default group i.e. either you primary gid or the directories gid. Of course the consequences depend on which group this actually is. This was checked with 1.2.11 latest stable, but probably also exists in earlier versions, since the...