EUVD-2004-1391

Malware in sbrugna...

Solaris pfexec Upgrade Shell

This module attempts to upgrade a shell session to UID 0 using pfexec. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Solaris pfexec Upgrade Shell', 'Description' = %q This module attempts to...

Solaris Update for pfexec 116238-01

Check for the Version of pfexec OpenVAS Vulnerability Test Solaris Update for pfexec 116238-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Solaris Update for pfexec 116237-01

Check for the Version of pfexec OpenVAS Vulnerability Test Solaris Update for pfexec 116237-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Solaris Update for pfexec 116237-01

Check for the Version of pfexec OpenVAS Vulnerability Test Solaris Update for pfexec 116237-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Solaris Update for pfexec 116238-01

Check for the Version of pfexec OpenVAS Vulnerability Test Solaris Update for pfexec 116238-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

CVE-2004-1394

An advisory for CVE-2004-1394 describes a local privilege escalation in Sun Solaris 8 and 9. The pfexec function fails to properly handle an invalid entry in the exec_attr database within a custom rights profile, potentially allowing local users with such profiles to execute profile commands with...

CVE-2004-1394: Undefined Security Weakness

The pfexec function for Sun Solaris 8 and 9 does not properly handle when a custom profile contains an invalid entry in the execattr database, which may allow local users with custom rights profiles to execute profile commands with additional privileges...