UBUNTU-CVE-2015-5299

The shadowcopy2getshadowcopydata function in modules/vfsshadowcopy2.c in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not verify that the DIRECTORYLIST access right has been granted, which allows remote attackers to access snapshots by visiting a shadow copy...

Security fix for the ALT Linux 7 package samba version 4.3.3-alt1

Dec. 16, 2015 Andrey Cherepanov 4.3.3-alt1 - New version https://www.samba.org/samba/history/samba-4.3.3.html - Security fixes: - CVE-2015-3223 Denial of service in Samba Active Directory server - CVE-2015-5252 Insufficient symlink verification in smbd - CVE-2015-5299 Missing access control check...

PT-2015-3396

Name of the Vulnerable Software and Affected Versions Samba versions 3.x through 4.1.21 Samba versions 4.2.x through 4.2.6 Samba versions 4.3.x through 4.3.2 Description The issue is related to the shadow copy2 get shadow copy data function, which does not verify that the DIRECTORY LIST access...

Brocade Fabric OS 6.3.1b Weak System Configuration

Title: Brocade Fabric OS v6.3.1b - Multiple vulnerabilities Discovered by: Karn Ganeshen Vendor Homepage: www.brocade.com Versions Reported: Kernel 2.6.14.2 + FabOS v6.3.1b + BootProm 1.0.9 version Kernel: 2.6.14.2 Fabric OS: v6.3.1b BootProm: 1.0.9 1 Default diagnostic accounts root and factory...

Unable to exclude files from snapshot: Shadow Copy Optimization Writer timed out

Challenge A Veeam Agent for Microsoft Windows backup job configured to operate in file-level backup mode with an entire volume selected and individual folders excluded, may fail with the error shown below. Unable to exclude files from snapshot: Shadow Copy Optimization Writer timed out. Cause The...

PT-2019-6480

Name of the Vulnerable Software and Affected Versions shadow versions 4.0 through 4.1.4 sudo versions 1.0 through 1.7.3 Description The issue allows for a possible tty hijacking via "su - user -c program". This can be exploited by using the TIOCSTI ioctl to push characters into the input buffer,...

Tails 1.6 Information Disclosure

Tails On Tails /dev/null | grep ^amnesia amnesia:$6$r0jt1v9E$UOrWbJ70qAH/sjaKfjmCMvkXZ19bqC2ieQ2UvYk0HKwVvgxuZFtyIwjoLfgH AwrZVM3a0NTEkcsQY1hn/Uq2S0:16710:0:99999:7:::...

CVE-2007-0003

pamunix.so in Linux-PAM 0.99.7.0 allows context-dependent attackers to log into accounts whose password hash, as stored in /etc/passwd or /etc/shadow, has only two characters...

CVE-2008-5394

/bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other Linux distributions, allows local users in the utmp group to overwrite arbitrary files via a symlink attack on a temporary file referenced in a line aka utline field in a utmp entry...

Shadow Infosystem Arbitrary File Download

|||||||||||||||||||||||||||||||||||||||||| |--------------------------------------------------------------| |+ Exploit Title: Shadow Infosystem Arbitrary File Download |+ |+ Exploit Author: Ashiyane Digital Security Team |+ |+ Vendor Homepage: http://shadowinfosystem.com |+ |+ Google Dork:...

wireshark security, bug fix, and enhancement update

1.8.10-17.0.2 - Fix ocfs2 dissector John Haxby orabug 21505640 1.8.10-17.0.1.el6 - Add oracle-ocfs2-network.patch to allow disassembly of OCFS2 interconnect 1.8.10-17 - security patches - Resolves: CVE-2015-2189 CVE-2015-2191 1.8.10-16 - security patches - Resolves: CVE-2014-8710 CVE-2014-8711...

Qualys Security Advisory - CVE-2015-3245 userhelper - CVE-2015-3246 libuser

Hello, it is July 23, 2015, 17:00 UTC, the Coordinated Release Date for CVE-2015-3245 and CVE-2015-3246. Please find our advisory below, and our exploit attached. Qualys Security Advisory CVE-2015-3245 userhelper chfn newline filtering CVE-2015-3246 libuser passwd file handling -- Summary...

libuser security update

CentOS Errata and Security Advisory CESA-2015:1483 Updated libuser packages that fix two security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, whic...

linux/x86 - chmod() 777 /etc/shadow & exit() - 33 bytes

Linux/x86 - chmod 777 /etc/shadow & exit - 33 bytes Greetz : BombermanLeader Author : B3mB4m Concat : email protected Disassembly of section .text: 08048060 : 8048060: 31 c0 xor %eax,%eax 8048062: 50 push %eax 8048063: 68 61 64 6f 77 push $0x776f6461 8048068: 68 63 2f 73 68 push $0x68732f63...

linux/x86 chmod('/etc/shadow','0777') - shellcode 42 bytes

/ Title: Linux/x86 chmod'/etc/shadow','0777' - shellcode 42 bytes Platform: linux/x8664 Date: 2015-06-15 Author: Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Mail : meatrezadotes , reza.esparghamatgmaildotcom Website : www.reza.es Twitter : https://twitter.com/rezesp...

Linux/x86 chmod'/etc/shadow','0777' shellcode 42 bytes

Linux/x86 chmod'/etc/shadow','0777' shellcode 42 bytes. Shellcode exploit for linx86 platform / Title: Linux/x86 chmod'/etc/shadow','0777' - shellcode 42 bytes Platform: linux/x8664 Date: 2015-06-15 Author: Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Mail : meatrezadote...

Dreambox WebInfo Authentication Bypass Vulnerability

This exploit is caused by systems files , they are writable , so i check them and i was able to cat or download the /etc/shadow user file , and bypass auth by fetching the user and cracking password. This is private exploit. You can buy it at https://0day.today...

Linux/x86 - chmod 777 /etc/shadow & exit 33 bytes

Linux/x86 - chmod 777 /etc/shadow & exit 33 bytes. Shellcode exploit for linx86 platform Linux/x86 - chmod 777 /etc/shadow & exit - 33 bytes Greetz : BombermanLeader Author : B3mB4m Concat : [email protected] Disassembly of section .text: 08048060 : 8048060: 31 c0 xor %eax,%eax 8048062: 50 push %e...

chromium-browser: Use-after-free in SVG.

Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document that leverages improper handling of a shadow tree for a use element...

Newsletter 4.3 SQL Injection

------------------------ Exploit Title : Newsletter 4.3 SQL Injection Vulnerability Exploit Author : Ashiyane Digital Security Team Vendor Homepage: www.conpresso.de - www.conpresso4.de Google Dork ONE: intext:Module Newsletter 4.3 Google Dork TWO: Module Newsletter 4.3 by www.conpresso4.de Date ...