59 matches found
CVE-2017-14105
HiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifying a backup archive before a restore, because the restore feature does not validate pathnames within the archive. An authenticated, local attacker - even restricted as a tenant - can add a jsp at...
Design/Logic Flaw
HiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifying a backup archive before a restore, because the restore feature does not validate pathnames within the archive. An authenticated, local attacker - even restricted as a tenant - can add a jsp at...
PT-2015-1765
Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.5 Description The issue is related to the kernel in Apple OS X, which does not properly validate pathnames in the environment. This allows local users to gain privileges via unspecified vectors. The...
Race condition
Race condition in kext tools in Apple OS X before 10.10.4 allows local users to bypass intended signature requirements for kernel extensions by leveraging improper pathname validation...
CVE-2015-3709
CVE-2015-3709 refers to a TOCTOU race condition in Apple’s kext tools on macOS OS X Yosemite prior to 10.10.4. The flaw occurs during kernel-extension path validation, allowing a local user to bypass signature checks and load unsigned kernel extensions. Public details in connected docs indicate t...
CVE-2015-3709: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition in kext tools in Apple OS X before 10.10.4 allows local users to bypass intended signature requirements for kernel extensions by leveraging improper pathname validation...
PT-2015-6461
Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client version 3.160 Description The issue is related to improper pathname validation, allowing local users to gain privileges through a crafted INF file. Recommendations For Cisco AnyConnect Secure Mobility...
Debian Security Advisory DSA 735-1 (sudo)
The remote host is missing an update to sudo announced via advisory DSA 735-1. OpenVAS Vulnerability Test $Id: deb7351.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 735-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Sudo 1.3.1 - 1.6.8p Pathname Validation Local Root Exploit (openbsd)
No description provided by source. include stdio.h include stdlib.h include unistd.h include sysexits.h include sys/wait.h define SUDO "/usr/bin/sudo" ifdef BUFSIZ undef BUFSIZ define BUFSIZ 128 endif / ANY MODIFIED REPUBLISHING IS RESTRICTED OpenBSD sudo 1.3.1 - 1.6.8p local root exploit Tested...
[SECURITY] [DSA 735-2] New sudo packages fix pathname validation race
------------------------------------------------------------------------ Debian Security Advisory DSA 735-2 [email protected] http://www.debian.org/security/ Michael Stone July 07, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...
[SECURITY] [DSA 735-2] New sudo packages fix pathname validation race
------------------------------------------------------------------------ Debian Security Advisory DSA 735-2 [email protected] http://www.debian.org/security/ Michael Stone July 07, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...
DSA-735-2 sudo - pathname validation race
Bulletin has no description...
Debian DSA-735-1 : sudo - pathname validation race
A local user who has been granted permission to run commands via sudo could run arbitrary commands as a privileged user due to a flaw in sudo's pathname validation. This bug only affects configurations which have restricted user configurations prior to an ALL directive in the configuration file. ...
Sudo 1.3.1 1.6.8p (OpenBSD) - Pathname Validation Privilege Escalation
Sudo 1.3.1 1.6.8p OpenBSD - Pathname Validation Privilege Escalation include include include include include define SUDO "/usr/bin/sudo" ifdef BUFSIZ undef BUFSIZ define BUFSIZ 128 endif / ANY MODIFIED REPUBLISHING IS RESTRICTED OpenBSD sudo 1.3.1 - 1.6.8p local root exploit Tested under OpenBSD...
Sudo 1.3.1 < 1.6.8p (OpenBSD) - Pathname Validation Privilege Escalation
include include include include include define SUDO "/usr/bin/sudo" ifdef BUFSIZ undef BUFSIZ define BUFSIZ 128 endif / ANY MODIFIED REPUBLISHING IS RESTRICTED OpenBSD sudo 1.3.1 - 1.6.8p local root exploit Tested under OpenBSD 3.6 sudo 1.6.7p5 Vuln by OpenBSD errata,...
Sudo 1.3.1 - 1.6.8p Pathname Validation Local Root Exploit (openbsd)
Exploit for bsd platform in category local exploits ==================================================================== Sudo 1.3.1 - 1.6.8p Pathname Validation Local Root Exploit openbsd ==================================================================== include include include include include...
[SECURITY] [DSA 735-1] New sudo packages fix pathname validation race
------------------------------------------------------------------------ Debian Security Advisory 735-1 [email protected] http://www.debian.org/security/ Michael Stone July 01, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...
[SECURITY] [DSA 735-1] New sudo packages fix pathname validation race
------------------------------------------------------------------------ Debian Security Advisory 735-1 [email protected] http://www.debian.org/security/ Michael Stone July 01, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...