HP-UX PHCO_27345 : HP-UX Shells, Local Increase of Privilege, Denial of Service (DoS) (HPSBUX00275 SSRT3618 rev.2)

s700800 11.11 cumulative sh-posix1 patch : Shells improperly manage files during operations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO27345. The text itself is copyright C Hewlett-Packard Development...

HP-UX PHCO_27763 : HP-UX Shells, Local Increase of Privilege, Denial of Service (DoS) (HPSBUX00275 SSRT3618 rev.2)

s700800 11.00 csh1 cumulative patch : Shells improperly manage files during operations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO27763. The text itself is copyright C Hewlett-Packard Development...

HP-UX PHCO_27418 : HP-UX Shells, Local Increase of Privilege, Denial of Service (DoS) (HPSBUX00275 SSRT3618 rev.2)

s700800 11.00 ksh1 cumulative patch : Shells improperly manage files during operations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO27418. The text itself is copyright C Hewlett-Packard Development...

HP-UX Security patch : PHCO_27804

The remote host is missing HP-UX Security Patch number PHCO27804 . SSRT3618 Rev. 1 HP-UX shells %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17385; scriptversion"1.6";...

HP-UX PHCO_27019 : HP-UX Shells, Local Increase of Privilege, Denial of Service (DoS) (HPSBUX00275 SSRT3618 rev.2)

s700800 11.11 ksh1 patch : Shells improperly manage files during operations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO27019. The text itself is copyright C Hewlett-Packard Development Company, L.P...

HP-UX PHCO_29698 : HP-UX Shells, Local Increase of Privilege, Denial of Service (DoS) (HPSBUX00275 SSRT3618 rev.2)

s700800 11.04 VVOS ksh1 cumulative patch : Shells improperly manage files during operations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO29698. The text itself is copyright C Hewlett-Packard Development...

HP-UX PHCO_26561 : HP-UX Shells, Local Increase of Privilege, Denial of Service (DoS) (HPSBUX00275 SSRT3618 rev.2)

s700800 11.11 csh1 cumulative patch : Shells improperly manage files during operations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO26561. The text itself is copyright C Hewlett-Packard Development...

HP-UX PHCO_27344 : HP-UX Shells, Local Increase of Privilege, Denial of Service (DoS) (HPSBUX00275 SSRT3618 rev.2)

s700800 11.00 sh-posix1 cumulative patch : Shells improperly manage files during operations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO27344. The text itself is copyright C Hewlett-Packard Development...

rssh and scponly arbitrary command execution

Vulnerable applications: rssh All versions All operating systems scponly All versions All operating systems Not vulnerable: Discussion: rssh and scponly are restricted shells that are designed to allow execution only of certain preset programs. Both are used to grant a user the ability to transfe...

PoPToP < 1.1.3-b3/1.1.3-20030409 - Negative Read Overflow (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Poptop...

Restricted Shells

I have recently realized a security issue in some of the restricted shells on NIX systems. I am not sure if I am the first one to discover the problem I am going to discuss but I am sure that it has not been posted yet, atleast not that I know of. Basically this is the issue: Affected Systems:...

Lion Worm Detection

This host seems to be infected by the lion worm, because it has root shells running on extra ports and a copy of SSH running on port 33568. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid10646; scriptversion"1.21"...

CVE-2000-1134

Multiple shell programs on various Unix systems, including 1 tcsh, 2 csh, 3 sh, and 4 bash, follow symlinks when processing redirects aka here-documents or in-here documents, which allows local users to overwrite files of other users via a symlink attack...

CVE-1999-0901

CVE-1999-0901 affects the ypserv component (noted as ypserv 4.1-4 in some feeds). The description across Red Hat and CVE records states that a local user can modify the GECOS field and login shells of other users, indicating an unauthorized local privilege impact. The Red Hat/Red Hat-linked entri...

Apple Mac OSX 10 / HP-UX 9/10/11 / Mandriva 6/7 / RedHat 5/6 / SCO 5 / IRIX 6 - Shell Redirection Race Condition

source: https://www.securityfocus.com/bid/2006/info bash, tcsh, cash, ksh and sh are all variations of the Unix shell distributed with many Unix and Unix clone operating systems. A vulnerability exists in these shells that could allow an attacker to arbitrarily write to files. A vulnerability has...

AZL-7455 CVE-1999-0901 affecting package ypserv 4.1-4

ypserv allows a local user to modify the GECOS and login shells of other users...

PT-1999-1447 · Ypserv · Ypserv

Name of the Vulnerable Software and Affected Versions: ypserv affected versions not specified Description: The issue allows a local user to modify the GECOS and login shells of other users. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

Web Server /cgi-bin Shell Access

The remote web server has one of these shells installed in /cgi-bin : ash, bash, csh, ksh, sh, tcsh, zsh Leaving executable shells in the cgi-bin directory of a web server may allow an attacker to execute arbitrary commands on the target machine with the privileges of the HTTP daemon. %NASLMINLEV...