Netscape Enterprise Server 4.0sparcSunOS 5.7 - Remote Command Execution

Netscape Enterprise Server 4.0sparcSunOS 5.7 - Remote Command Execution !/usr/bin/perl Remote sploit for Netscape Enterprise Server 4.0/sparc/SunOS 5.7 usage: ns-shtml.pl 'command line' | nc victim port Sometimes server may hang or coredump.. eek ;- [email protected] $cmdline="echo 'ingresloc...

Netscape Enterprise Server 4.0/sparc/SunOS 5.7 - Remote Command Execution

!/usr/bin/perl Remote sploit for Netscape Enterprise Server 4.0/sparc/SunOS 5.7 usage: ns-shtml.pl 'command line' | nc victim port Sometimes server may hang or coredump.. eek ;- [email protected] $cmdline="echo 'ingreslock stream tcp nowait root /bin/sh sh -i' /tmp/bob; /usr/sbin/inetd -s...

Netscape Enterprise Server 4.0/sparc/SunOS 5.7 Remote Exploit

Exploit for solaris platform in category remote exploits ============================================================= Netscape Enterprise Server 4.0/sparc/SunOS 5.7 Remote Exploit ============================================================= !/usr/bin/perl Remote sploit for Netscape Enterprise...

Solaris Arp Vulnerability

Vulnerability in Solaris arp1M Date Published: November 28, 2000 Advisory ID: N/A Bugtraq ID: N/A CVE CAN: Non currently assigned. Title: Solaris arp1M Buffer Overflow Vulnerability Class: Boundary Error Condition Remotely Exploitable: No Locally Exploitable: Yes Vulnerability Description: The...

SunOS 5.7 Catman - Local Insecure tmp Symlink Clobber Exploit

Exploit for solaris platform in category dos / poc ============================================================= SunOS 5.7 Catman - Local Insecure tmp Symlink Clobber Exploit ============================================================= !/usr/local/bin/perl -w The problem is catman creates files ...

SunOS 5.7 Catman - Local Insecure tmp Symlink Clobber

!/usr/local/bin/perl -w The problem is catman creates files in /tmp insecurly. They are based on the PID of the catman process, catman will happily clobber any files that are symlinked to that file. The idea of this script is to watch the process list for the catman process, get the pid and Creat...

ooo1.txt

ooo1.txt Netscape PublishingXpert 2. file-reading/dir-listing vuln in PSCOErrPage.htm by \x00\x00 0s vuln: SunOS 5.6 and SunOS 5.5.1 others versions affected possibly discription: PSCOErrPage.htm is a error handler message page, when theirs a server error usually you will get fowarded to this alo...

CVE-1999-0370

Technical details (affected versions, exploit methods, fixes) are not publicly provided in the supplied documents for CVE-1999-0370; monitor for updates from official sources.

CVE-1999-0298

ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. dot dot attack...

CVE-1999-0298

The CVE-1999-0298 issue affects ypbind when the -ypset and -ypsetme options are activated in Linux Slackware and SunOS. The underlying vulnerability is a directory traversal attack (".." path) that allows overwriting files. Reported impact includes local and remote attackers able to modify files....

CVE-1999-0370

In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files...

CVE-1999-1586

loadmodule in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, which allows local users to gain privileges, a different vulnerability than CVE-1999-1584...

CVE-1999-1584

Unknown vulnerability in 1 loadmodule, and 2 modload if modload is installed with setuid/setgid privileges, in SunOS 4.1.1 through 4.1.3c, and Open Windows 3.0, allows local users to gain root privileges via environment variables, a different vulnerability than CVE-1999-1586...

CVE-1999-1592

Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3U1 and 4.1.4, have unspecified attack vectors and impact. NOTE: this might overlap CVE-1999-0129...

SunOS 4.1.1 - usrreleasebinmakeinstall Local Privilege Escalation

SunOS 4.1.1 - usrreleasebinmakeinstall Local Privilege Escalation source: https://www.securityfocus.com/bid/21/info This applies to sites that have installed Sun Source tapes only. The Sun distribution of sources sunsrc has an installation procedure which creates the directory /usr/release/bin an...

SunOS 4.1.1 - '/usr/release/bin/makeinstall' Local Privilege Escalation

source: https://www.securityfocus.com/bid/21/info This applies to sites that have installed Sun Source tapes only. The Sun distribution of sources sunsrc has an installation procedure which creates the directory /usr/release/bin and installs two setuid root files in it: makeinstall and winstall...

SunOS 4.1.1 - usrreleasebinwinstall Local Privilege Escalation

SunOS 4.1.1 - usrreleasebinwinstall Local Privilege Escalation source: https://www.securityfocus.com/bid/22/info This applies to sites that have installed Sun Source tapes only. The Sun distribution of sources sunsrc has an installation procedure which creates the directory /usr/release/bin and...

CVE-1999-0301

CVE-1999-0301 describes a buffer overflow in the SunOS/Solaris ps command. The connected sources confirm a local vulnerability in the ps utility that could allow a user to escalate privileges (impacting confidentiality, integrity, and availability) as indicated by the CVE record’s base metrics. T...

CVE-1999-0302

CVE-1999-0302 affects SunOS/Solaris FTP clients. A malicious FTP server can coerce the client into executing arbitrary commands, a network-accessible issue with no authentication required. This can impact confidentiality, integrity, and availability as per the CVSS description (base score 7.5, HI...

CVE-1999-0167

CVE-1999-0167 describes a vulnerability in SunOS where NFS file handles are predictable/guessable, allowing an attacker to mount exported file systems without proper authorization. The issue arises from guessable NFS file handles as the root cause, with potential exposure of confidentiality, inte...