3539 matches found
CVE-1999-0242
Remote attackers can access mail files via POP3 in some Linux systems that are using shadow passwords...
CVE-1999-0242
The CVE describes a vulnerability where remote attackers could access mail files via POP3 on some Linux systems that use shadow passwords. Connected sources corroborate that the issue arises from how mail data is stored/access-controlled in environments with shadow passwords, enabling partial con...
unixware.pkg.txt
Greetings, OVERVIEW Any user may read any file on the system. BACKGROUND Only UnixWare 7.1 has been tested. DETAILS As previously stated, UnixWare binaries gain additional privileges via standard suid/sgid AND /etc/security/tcb/privs. The majority of the UnixWare "pkg" command, such as pkginfo,...
SCO Unixware 7.1 pkginstall - Local Buffer Overflow
SCO Unixware 7.1 pkginstall - Local Buffer Overflow // source: https://www.securityfocus.com/bid/853/info It is possible to view the entries in /etc/shadow through exploiting a buffer overflow in pkgcat and pkginstall. Though neither of these binaries are setuid, the dacread permissions which are...
SCO Unixware 7.1 pkgcat - Local Buffer Overflow
SCO Unixware 7.1 pkgcat - Local Buffer Overflow // source: https://www.securityfocus.com/bid/853/info It is possible to view the entries in /etc/shadow through exploiting a buffer overflow in pkgcat and pkginstall. Though neither of these binaries are setuid, the dacread permissions which are...
SCO Unixware 7.1 pkgcat - Local Buffer Overflow
// source: https://www.securityfocus.com/bid/853/info It is possible to view the entries in /etc/shadow through exploiting a buffer overflow in pkgcat and pkginstall. Though neither of these binaries are setuid, the dacread permissions which are granted in /etc/security/tcb/privs give them the...
unixware.pkg.exploits.txt
Greetings, OVERVIEW Most of UnixWare's pkg commands can be exploited to print /etc/shadow, leading to a probable root compromise. BACKGROUND Only tested on UnixWare 7.1. DETAILS The permissions for the UnixWare pkg commands are as follows: bash-2.02$ ls -la /usr/sbin/pkgchk /usr/bin/pkginfo...
SCO Unixware 7.1 pkginstall - Local Buffer Overflow
// source: https://www.securityfocus.com/bid/853/info It is possible to view the entries in /etc/shadow through exploiting a buffer overflow in pkgcat and pkginstall. Though neither of these binaries are setuid, the dacread permissions which are granted in /etc/security/tcb/privs give them the...
pam_unix_passwd.so.txt
Date: Wed, 23 Dec 1998 13:12:45 +0100 From: Michal Zalewski Reply-To: Bugtraq List To: [email protected] Subject: Linux PAM up to 0.64-2 local root compromise As someone said, "Never make any mistaeks." Latest release of Linux Pluggable Authentication Modules pam-0.64-2, as well as previous...
shadow.root.uid.65536.txt
Date: Mon, 24 May 1999 20:44:28 +0200 From: Lord Evil To: [email protected] Subject: UID 65536 and shadow-19990307 Recently one of our admins installed the shadow-19990307 package. While playing around I noticed that if a new user is created with UID 65536, he will become root upon login. No...
caldera.coas.shadow.txt
Date: Tue, 27 Apr 1999 20:26:16 -0600 From: synapse To: [email protected] Subject: Caldera Advisory Heya Aleph, Not sure if this had come accross the list. -----BEGIN PGP SIGNED MESSAGE----- Caldera Systems, Inc. Security Advisory Subject: COAS Advisory number: CSSA-1999:009.0 Issue date: 1999...
SGI IRIX 6.5.2 - nsd Information Gathering
SGI IRIX 6.5.2 - nsd Information Gathering / source: https://www.securityfocus.com/bid/412/info A vulnerability has been discovered in the nsd service, as included by SGI in Irix 6.5.x. The vulnerability allows remote users to access potentially sensitive pieces of information, including, but not...
PT-1999-1292 · Caldera · Caldera Open Administration System
Name of the Vulnerable Software and Affected Versions: Caldera Open Administration System COAS affected versions not specified Description: A vulnerability in Caldera Open Administration System COAS allows the /etc/shadow password file to be made world-readable. Recommendations: At the moment,...
Slackware Linux 3.5 - etcgroup Local Privilege Escalation
Slackware Linux 3.5 - etcgroup Local Privilege Escalation source: https://www.securityfocus.com/bid/155/info Due to the way /bin/login behaves when a /etc/group file is not present under Slackware's version of the password shadowing suite, users who log in while this file is not present will be...
[SECURITY] New versions of su fixes security problem
==================================================================== Debian GNU/Linux Security May 13, 1998 We have received reports telling us that there was a problem with the program su from the shadow package. This has been fixed in recent uploads. We recommend you update shadow-su immediatel...
Resolv+ (RESOLV_HOST_CONF) Linux Library Local Exploit
Exploit for linux platform in category local exploits ====================================================== Resolv+ RESOLVHOSTCONF Linux Library Local Exploit ====================================================== setenv RESOLVHOSTCONF /etc/shadow; ping adfas 0day.today 2018-02-18...
CVE-1999-0242
Remote attackers can access mail files via POP3 in some Linux systems that are using shadow passwords...
PT-1995-1017 · Linux · Linux
Name of the Vulnerable Software and Affected Versions: Linux systems using shadow passwords affected versions not specified Description: The issue allows remote attackers to access mail files via POP3 in some Linux systems. This is possible due to the use of shadow passwords in these systems...
