4705 matches found
Security Bulletins Digest
HP Support Information Digests =============================================================================== o IT Resource Center World Wide Web Service --------------------------------------------------- If you subscribed through the IT Resource Center and would like to be REMOVED from this...
Дырка в dtterm от HP-UX
No description provided...
HP-UX 9.x10.x11.x - cu Buffer Overflow
HP-UX 9.x10.x11.x - cu Buffer Overflow source: https://www.securityfocus.com/bid/1886/info cu is a unix utility that is used for communication between two hosts usually over phone lines. It is typically isntalled setuid root so that it can access communications hardware when executed by a regular...
HP-UX 9.x/10.x/11.x - cu Buffer Overflow
source: https://www.securityfocus.com/bid/1886/info cu is a unix utility that is used for communication between two hosts usually over phone lines. It is typically isntalled setuid root so that it can access communications hardware when executed by a regular user. The version of cu that ships wit...
Re: [ Hackerslab bug_paper ] HP-UX crontab temporary file symboliclink vulnerability
Hi, Tested on 4.0-RELEASE FreeBSD 4.0-RELEASE 9 4.1-RELEASE FreeBSD 4.1-RELEASE 1: Can read any file wich start with comment simbol $ ls -l /etc/sudoers -r-------- 1 root wheel 313 24 oct 20:20 /etc/sudoers $ id uid=1002alf gid=1002alf groups=1002alf $ crontab -e /tmp/crontab.hLmjTbK417 :!sh Make...
hp-ux.crontab.sh
Hackerslab bugpaper HP-UX crontab temporary file symbolic link vulnerability Attach ====================== crontab.sh ================================ !/bin/sh HP-UX 11.00 crontab Kyong-won,Cho [email protected] Usage : ./crontab.sh if -z "$1" then echo "Usage : $0 " exit fi cat /tmp/crontabex...
[ Hackerslab bug_paper ] HP-UX crontab temporary file symbolic link vulnerability
============================================================================ ==== Hackerslab bugpaper HP-UX crontab temporary file symbolic link vulnerability ============================================================================ ==== File : /usr/bin/crontab SYSTEM : HP-UX Tested in HP-UX...
CVE-2000-0801
Buffer overflow in bdf program in HP-UX 11.00 may allow local users to gain root privileges via a long -t option...
CVE-2000-0702
The net.init rc script in HP-UX 11.00 S008net.init allows local users to overwrite arbitrary files via a symlink attack that points from /tmp/stcp.conf to the targeted file...
CVE-2000-0699
Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via format strings in the PASS command...
CVE-2000-0730
Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges...
CVE-2000-0755
Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges...
HP-UX 10.2011.0 - crontab tmp File
HP-UX 10.2011.0 - crontab tmp File source: https://www.securityfocus.com/bid/1845/info crontab is a binary in the cron package of the HP-UX cron implementation which allows a user to create a file of scheduled commands. A vulnerabiltiy in crontab exists that allows a user to read any file on an...
HP-UX 10.20/11.0 - crontab '/tmp' File
source: https://www.securityfocus.com/bid/1845/info crontab is a binary in the cron package of the HP-UX cron implementation which allows a user to create a file of scheduled commands. A vulnerabiltiy in crontab exists that allows a user to read any file on an HP-UX system. crontab as implemented...
CVE-2000-0515
The snmpd.conf configuration file for the SNMP daemon snmpd in HP-UX 11.0 is world writable, which allows local users to modify SNMP configuration or gain privileges...
CVE-2000-0515
The CVE-2000-0515 issue affects HP-UX 11.0 where the snmpd.conf configuration file of the SNMP daemon (snmpd) is world-writable. This allows local users to modify SNMP configuration or gain privileges due to the insecure permissions on the config file (world-writable). The provided description do...
CVE-2000-0468
CVE-2000-0468 affects HP-UX 10.20 and 11, where a local attacker can overwrite files via a symbolic link attack. The entry indicates local access with low complexity and partial confidentiality/integrity/availability impact (CVSS v2 base 4.6). The connected documents corroborate the description b...
CVE-2000-0468
man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack...
CVE-2000-0730
CVE-2000-0730 describes a vulnerability in the HP-UX 11.0 Affected software: HP-UX operating system (HP-UX 11.0) and its newgrp command. Issue: Local privilege escalation. The root cause is not detailed in the provided documents. Impact: Local users may gain privileges. Exploitation: Not provided...