6837 matches found
GNU Coreutils pam_succeed_if PAM模块本地绕过认证漏洞
BUGTRAQ ID: 30363 CVECAN ID: CVE-2008-1946 GNU核心工具（Coreutils）是GNU操作系统所使用的基本文件、shell和文本操控工具。 Coreutils软件包没有对su命令正确地使用配置文件中的pamsucceedif可插拔认证模块（PAM），如果运行su的用户知道目标帐号的口令的话，任何本地用户都可以使用这个命令更改锁定的或过期的用户帐号。 GNU Coreutils 5.2.1 RedHat ------ RedHat已经为此发布了一个安全公告（RHSA-2008:0780-01）以及相应补丁:...
Default configuration
The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a 1 locked or 2 expired account by entering the account name on the command line, related to improper use of the pamsucceedif.so module...
CVE-2008-1946
The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a 1 locked or 2 expired account by entering the account name on the command line, related to improper use of the pamsucceedif.so module...
CVE-2008-1946
The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a 1 locked or 2 expired account by entering the account name on the command line, related to improper use of the pamsucceedif.so module...
CVE-2008-1946
The CVE-2008-1946 entry concerns GNU coreutils 5.2.1 where the default PAM config for su in /etc/pam.d/su mishandles pam_succeed_if.so, enabling any local user to switch to a locked or expired account by supplying an account name on the command line. Concrete details show the affected component (...
CVE-2008-1946
The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a 1 locked or 2 expired account by entering the account name on the command line, related to improper use of the pamsucceedif.so module...
GNU Coreutils 'pam_succeed_if' PAM本地验证绕过漏洞
BUGTRAQ ID: 30363 CVE ID:CVE-2008-1946 CNCVE ID：CNCVE-20081946 GNU Coreutils是一款提供一整套基本的shell工具的软件包。 GNU Coreutils存在验证绕过问题，本地攻击者可以利用漏洞运行'su'命令来获得对锁住或过期帐户的访问。 配置文件中针对"su"命令没有正确的使用pamsucceedif PAM，如果目标帐户的密码被运行"su"命令的用户知道的情况下，可使用此命令更改锁住或过期用户帐户。 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux ES ...
/etc/pam.d/su is wrong in RHEL-4.6
The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a 1 locked or 2 expired account by entering the account name on the command line, related to improper use of the pamsucceedif.so module...
Mac OS X <= 10.3.8 (CF_CHARSET_PATH) Local Root Buffer Overflow
No description provided by source. / MacOS XCFCHARSETPATH: local root exploit. by: [email protected] fakehalo/realhalo found by: iDefense anon finder saw the advisory on bugtraq and figured i'd slap this together, so simple i had to. exploits via the /usr/bin/su binary. you must press ENTER at the...
amx-activex.txt
'metasploit one, add a user "su" with pass "tzu" scode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%49%49%49%49%49%49%37%49%49%49%49%49%49%49%49%49%49%49%51%5a%6a%44%58%50%30%41%30%41%6b%41%41%54%42%41%32%...
AMX Corp. VNC ActiveX Control - AmxVnc.dll 1.0.13.0 Remote Buffer Overflow
AMX Corp. VNC ActiveX Control - AmxVnc.dll 1.0.13.0 Remote Buffer Overflow 'metasploit one, add a user "su" with pass "tzu" scode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%49%49%49%49%49%49%37%49%49%49%49%49%49%49%49%49%49%49%51%5a%6a%44%58%50%30%41%30%41%6b%41%41%54%42%41%32%41%41%32%4...
Microsoft Speech API ActiveX Control (Windows XP SP2) - Remote Buffer Overflow (MS07-033)
REM metasploit, add a user 'su' with pass 'tzu' scode =...
Microsoft Internet Explorer 6 Provideo Camimage - ISSCamControl.dll 1.0.1.5 Remote Buffer Overflow
Microsoft Internet Explorer 6 Provideo Camimage - ISSCamControl.dll 1.0.1.5 Remote Buffer Overflow REM metasploit one, add a user 'su' with pass 'tzu' shellcode =...
Tru64 5 (su) Env Local Stack Overflow Exploit
No description provided by source. / Copyright c 2000 ADM / / All Rights Reserved / / THIS IS UNPUBLISHED PROPRIETARY SOURCE CODE OF ADM / / The copyright notice above does not evidence any / / actual or intended publication of such source code. / / / / Title: Tru64 5 su / / Tested under: Tru64 5...
GLIBC (via /bin/su) Local Root Exploit
No description provided by source. / Working exploit for glibc executing /bin/su To exploit this i have used a technique that overwrites the .dtors section of /bin/su program with the address of the shellcode, so, the program executes it when main returns or exit is called Thanks a lot to rwxrwxr...
HP-UX 11i (LIBC TZ enviroment variable) Local Root Exploit
No description provided by source. / HP-UX libc timezone environment overflow exploit ================================================ HP-UX libc contains an exploitable stack overflow in the handling of "TZ" environment variable. The problem occurs due to insufficient bounds checking in the...
HP-UX PHCO_34545 : HP-UX su(1) Local Unauthorized Access (HPSBUX02111 SSRT061132 rev.2)
s700800 11.11 su1 cumulative patch : A potential security vulnerability has been identified with su1 when used with the LDAP netgroup feature. The potential vulnerability could be exploited by a local authorized user to gain unauthorized access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2006-1689
CVE-2006-1689 affects HP-UX B.11.11 in the su(1) utility when used with the LDAP netgroup feature. The underlying issue is a vulnerability that could allow a local user to gain unauthorized access. The connected Nessus entry references a cumulative patch (PHCO_34545) and related HP advisories (HP...
