Todd Miller Sudo 'runas_default'本地特权提升漏洞

Bugraq ID: 38432 CVE ID：CVE-2010-0427 Sudo是一款允许用户以其他用户权限安全地执行命令的程序，广泛使用在Linux和Unix操作系统下。 当使用"runasdefault"选项时，sudo不正确重设组权限。如果本地非特权用户由sudoers文件授权在默认用户帐户下执行sudo命令，可导致特权提升。 Todd Miller Sudo 1.6.9 p19 Todd Miller Sudo 1.6.9 p18 Todd Miller Sudo 1.6.9 p17 Todd Miller Sudo 1.6.9 p21已经修复此漏洞，建议用户下载使用：...

Sudo sudoedit命令本地权限提升漏洞

BUGTRAQ ID: 38362 CVECAN ID: CVE-2010-0426 Sudo是一款允许用户以其他用户权限安全地执行命令的程序，广泛使用在Linux和Unix操作系统下。 由于处理sudoedit命令时的错误，拥有sudoedit权限的本地用户可以以root用户权限执行任意代码。成功攻击要求sudoedit命令没有在sudoers文件中指定完整路径。 Todd Miller Sudo 1.7 Todd Miller Sudo 1.6 Todd Miller ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

SA-CONTRIB-2010-008 - Recent Comments - Cross Site Scripting

Recent Comments module provides a high-performance, fully themable block of recent comments. This release includes a fix for a cross-site scripting XSS vulnerability in which JavaScript could be inserted in the title of the Recent Comments block via a custom block title interface. This custom tit...

CVE-2008-6739

Todd Woolums ASP Download management script 1.03 does not require authentication for setupdownload.asp, which allows remote attackers to gain administrator privileges via a direct request...

Design/Logic Flaw

Todd Woolums ASP Download management script 1.03 does not require authentication for setupdownload.asp, which allows remote attackers to gain administrator privileges via a direct request...

CVE-2008-6739

Todd Woolums ASP Download management script 1.03 does not require authentication for setupdownload.asp, which allows remote attackers to gain administrator privileges via a direct request...

CVE-2008-6739

CVE-2008-6739 affects Todd Woolums ASP Download management script 1.03. The issue is that setupdownload.asp does not require authentication, allowing a remote attacker to obtain administrator privileges via a direct request. The documented impact is elevation to administrator access, with exploit...

Graugon Forum 1 - 'id' Command Injection / SQL Injection

!/usr/bin/perl |--------------------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

Todd Miller Sudo Runas_Alias组本地权限提升漏洞

BUGTRAQ ID: 33517 CVECAN ID: CVE-2009-0034 Sudo是一款允许用户以其他用户权限安全地执行命令的程序，广泛使用在Linux和Unix操作系统下。 sudo在确认用户属于哪个组的时候sudo中的parse.c文件没有正确地解释sudoer配置文件中的系统组（也被称为%group），本地用户可以利用run-as-user-in-group功能无需口令认证便以root用户权限执行sudo命令。 Todd Miller Sudo 1.6.9p17 - 1.6.9p19 厂商补丁： RedHat ------...

CVE-2008-5273

SQL injection vulnerability in viewnews.asp in Todd Woolums ASP News Management 2.2 allows remote attackers to execute arbitrary SQL commands via the newsID parameter...

CVE-2008-5274

Todd Woolums ASP News Management 2.2 allows remote attackers to obtain news items via a direct request to 1 rss.asp, 2 viewheadings.asp, or 3 viewnews.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in viewnews.asp in Todd Woolums ASP News Management 2.2 allows remote attackers to execute arbitrary SQL commands via the newsID parameter...

CVE-2008-5273

SQL injection vulnerability in viewnews.asp in Todd Woolums ASP News Management 2.2 allows remote attackers to execute arbitrary SQL commands via the newsID parameter...

CVE-2008-5274

CVE-2008-5274 affects Todd Woolums ASP News Management 2.2. The vulnerability allows remote attackers to obtain news items via direct requests to (1) rss.asp, (2) viewheadings.asp, or (3) viewnews.asp). The underlying issue is information disclosure through access to these pages, resulting in par...

CVE-2008-5273

The CVE-2008-5273 entry describes an SQL injection vulnerability in viewnews.asp of Todd Woolums ASP News Management 2.2, exploitable via the newsID parameter to execute arbitrary SQL commands remotely. Connected records confirm affected software/version and the underlying cause (unsafely handled...

CVE-2008-4511

Todd Woolums ASP News Management, possibly 2.21, stores db/news.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request...

CVE-2008-4511

Todd Woolums ASP News Management, possibly 2.21, stores db/news.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request...

CVE-2008-4511

CVE-2008-4511 concerns Todd Woolums ASP News Management, version likely 2.21, which stores db/news.mdb under the web root with insufficient access control. The described vulnerability enables remote attackers to obtain sensitive information via a direct request, indicating a confidentiality impac...

ASP Download 1.03 - Arbitrary Change Administrator Account

ASP Download 1.03 - Arbitrary Change Administrator Account \ ASPDownload v 1.03 Remote Admin Bypass Exploit / \ / / + Author : Underz0ne Crew + Script : ASPDownload v 1.03 + Risk : High + Script URL : http://www.toddwoolums.com/aspdownload.asp + Dork : Powered by AspDownload --//-- Exploit Area :...

awstats -- multiple XSS vulnerabilities

Secunia reports: Morgan Todd has discovered a vulnerability in AWStats, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed in the URL to awstats.pl is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary...