Operator Shell (osh) 1.7-13 - Local Privilege Escalation

Operator Shell osh 1.7-13 - Local Privilege Escalation You must be groupoperator for permissions /str0ke !/usr/bin/perl OSH 1.7 Exploit 2 Gonna bang away at this until it's removed ;- EDUCATIONAL purposes only.... :- by Charles Stevenson core Description: The Operator Shell Osh is a setuid root,...

CVE-2002-2005

Unknown vulnerability in Java web start 1.0.101, 1.0.1, 1.0 and 1.0.1.01 HP-UX 11.x only allows attackers to gain access to restricted resources via unknown attack vectors...

CVE-2002-2005: Undefined Security Weakness

Unknown vulnerability in Java web start 1.0.101, 1.0.1, 1.0 and 1.0.1.01 HP-UX 11.x only allows attackers to gain access to restricted resources via unknown attack vectors...

CVE-2001-1506

The CVE-2001-1506 entry concerns HP Secure OS Software for Linux 1.0, where the file system protection subsystem permits local users to gain additional privileges beyond the configured protection rules, enabling unauthorized operations on restricted files. The available sources describe the vulne...

CVE-2002-1715

SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable directory, then executing that script to gain normal shell access...

CVE-2002-1715

Technical details about CVE-2002-1715 are not publicly available in the provided connected documents. The initial description notes local privilege escalation via a world-writable directory, but no vendor/version/patch specifics are present here; monitor for updates.

CVE-2002-1715

SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable directory, then executing that script to gain normal shell access...

CVE-2002-1715: Undefined Security Weakness

SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable directory, then executing that script to gain normal shell access...

CVE-2005-1472

Certain system calls in Apple Mac OS X 10.4.1 do not properly enforce the permissions of certain directories without the POSIX read bit set, but with the execute bits set for group or other, which allows local users to list files in otherwise restricted directories...

CVE-2005-1791

CVE-2005-1791 affects Microsoft Internet Explorer 6 SP2 (build 6.0.2900.2180). The issue is a crash of URLMON.DLL when a user attempts to add a URI to the restricted zone whose full domain begins with a numeric sequence that looks like an IP address. The vulnerability is documented across CVE lis...

CVE-2005-1791

Microsoft Internet Explorer 6 SP2 6.0.2900.2180 crashes when the user attempts to add a URI to the restricted zone, in which the full domain name of the URI begins with numeric sequences similar to an IP address. NOTE: if there is not an exploit scenario in which an attacker can trigger this...

CVE-2005-1791: Undefined Security Weakness

Microsoft Internet Explorer 6 SP2 6.0.2900.2180 crashes when the user attempts to add a URI to the restricted zone, in which the full domain name of the URI begins with numeric sequences similar to an IP address. NOTE: if there is not an exploit scenario in which an attacker can trigger this...

CVE-2005-1791

Microsoft Internet Explorer 6 SP2 6.0.2900.2180 crashes when the user attempts to add a URI to the restricted zone, in which the full domain name of the URI begins with numeric sequences similar to an IP address. NOTE: if there is not an exploit scenario in which an attacker can trigger this...

[SA15473] Iron Bars SHell Format String Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

ibsh Iron Bars SHell Format String Vulnerability format string bug

Format string bug allows restricted shell escaping...

CVE-2005-0088

The publisher handler for modpython 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL...

DEBIAN-CVE-2005-0088

The publisher handler for modpython 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL...

CVE-2005-0088

The publisher handler for modpython 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL...

CVE-2001-1461

Directory traversal vulnerability in WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to access restricted resources via URL-encoded 1 /.. or 2 .. sequences...

CVE-2005-1091: Undefined Security Weakness

Maxthon 1.2.0 and 1.2.1 allows remote attackers to bypass the security ID and use restricted plugin API functions via script that includes the max.src file into the source page...