Sybase Easerver 6.3 Directory Traversal

This module exploits a directory traversal vulnerability found in Sybase EAserver's Jetty webserver on port 8000. Code execution seems unlikely with EAserver's default configuration unless the web server allows WRITE permission. Module Options msf use auxiliary/scanner/http/sybase/easervertravers...

Hack SA under the purview of the idea of adaptation-vulnerability warning-the black bar safety net

Last time already got this station of the SHELL, but the back door has long been K, today inadvertently and got the injection. D detection soon came out gratifying information, the SA permissions, go to the NB inside can list the directory but not the execution, telnet each other 1 4 3 3 can not ...

Microsoft Windows智能输入/输出（I2O）本地权限提升漏洞

BUGTRAQ ID: 29171 CVECAN ID: CVE-2008-0322 Windows是微软发布的非常流行的操作系统。 i2omgmt.sys是Windows所使用的智能输入/输出（I2O）工具过滤器驱动。Windows XP操作系统所捆绑的i2omgmt.sys驱动对\.\I2OExc设备接口设置了Everyone写权限，因此任何本地登录的用户都可以访问仅为特权用户设计的功能。此外，该设备接口的IOCTL处理器没有正确地验证用户态缓冲区输入，攻击者可以向用户态地址提供伪造的DeviceObject指针，导致覆盖任意内存，以内核权限执行任意指令。 Microsoft...

CVE-2006-2071

Linux kernel 2.4.x and 2.6.x up to 2.6.16 allows local users to bypass IPC permissions and modify a readonly attachment of shared memory by using mprotect to give write permission to the attachment. NOTE: some original raw sources combined this issue with CVE-2006-1524, but they are different bug...

Mandrake Linux Security Advisory : cvs (MDKSA-2003:009)

Two vulnerabilities were discoverd by Stefen Esser in the cvs program. The first is an exploitable double free bug within the server, which can be used to execute arbitrary code on the CVS server. To accomplish this, the attacker must have an anonymous read-only login to the CVS server. The secon...

PT-2002-2591 · Heysoft +1 · Heysoft Eventsave +1

Name of the Vulnerable Software and Affected Versions: Heysoft EventSave versions 5.1 through 5.2 Heysoft EventSave+ versions 5.1 through 5.2 Description: The issue allows attackers to prevent events from being recorded by opening the log file using an application such as Microsoft's Event Viewer...

Microsoft IIS 5.0 - In-Process Table Privilege Escalation

Microsoft IIS 5.0 - In-Process Table Privilege Escalation source: https://www.securityfocus.com/bid/3193/info A vulnerability exists in Microsoft's Internet Information Services 5.0 which could allow a user with write permission to run any code with System privileges...

Microsoft IIS 5.0 - In-Process Table Privilege Escalation

source: https://www.securityfocus.com/bid/3193/info A vulnerability exists in Microsoft's Internet Information Services 5.0 which could allow a user with write permission to run any code with System privileges...

vulnerability in oracle binary in Oracle 8.0.5 - 8.1.6

WWW.PLAZASITE.COM System & Security Division Title: Vulnerability in oracle binary in Oracle 8.0.5 Date: 11-12-2000 Platform: Only tested in Linux, but can be "exported" to others. Impact: Any user compromise any file owned by oracle DDBB owner. Author: Juan Manuel Pascual [email protected]...

Oracle Internet Directory LDAP Daemon does not check write permissions properly

Overview The Oracle LDAP Daemon oidldapd version 2.1.1.1, which ships with Oracle version 8i for Linux version 8.1.7, does not check write permissions properly. This can allow a local user to delete or write to any file on the system. Description The Oracle LDAP Daemon oidldapd version 2.1.1.1 do...

Solaris 7.0 - chkperm Local Privilege Escalation

Solaris 7.0 - chkperm Local Privilege Escalation source: https://www.securityfocus.com/bid/295/info Solaris 2.4, 2.5, and 2.5.1 possibly other versions have a package called FACE Framed Access Command Environment installed. Included in the package is a program called chkperm which checks a file t...