ABUS TVIP 11550/21550 suffers from arbitrary file read, file upload, and command execution vulnerabilities.
df7984b9951e899b6237afad1aec2dd2Limewire directory traversal exploit. Exploits bug in versions 4.1.2 - 4.5.6, inclusive.
dfa8a4ee0a01e7310d4c9ee1e46e77c3mailmgr version 1.2.3 is vulnerable to symlink attacks. If the utility is run as root, any file on the system can be overwritten.
a0f7ca82945ecb9df067978cd8d70653Majordomo, the popular mailing list utility, defaults which_access to open in the configuration file. A list of email accounts for a mailing list can be compromised by this de-facto setting by sending which @. Patch included.
7c5a6d5fb943b636027c61c62cd94d09Hackbot v2.15 is an host exploration tool and banner grabber. It scans hosts for FTP banners, SSH banners, Open Relays, EXPN and VRFY options, more than 200 common CGI vulnerabilities and common indexable directories, NT unicode vulnerabilities and NT nimda infections.
5202846849c754e7106f1b308cfcde34Hackbot v2.14 is an host exploration tool and banner grabber. It scans hosts for FTP banners, SSH banners, Open Relays, EXPN and VRFY options, more than 200 common CGI vulnerabilities and common indexable directories, NT unicode vulnerabilities and NT nimda infections.
1cdb72bd7977be5a7e1858443949959aNovell GroupWise Internet Agent 6.0.1 sp1 contains a buffer overflow in the smtp service which can be exploited over port 25. Tested on Novell NetWare 5.1 sp3. Fix available here.
83dcb3c7ed6da3d4ebe08ecd420de893The script command overwrites hardlinks named typescript in the current directory.
e546ea507ca071abe3463d61624074c1Majordomo v1.94.4 contains vulnerabilities which allow local users to obtain a uid=majordomo shell.
f6097b21c3e3084814496027e4c89aadRemoving the SUID bit from xlock causes enter to work as a password to unlock the screen for all users except root. With no SUID bit it can no longer read /etc/shadow, creating a blank .xlockrc, causing enter to be a valid password.
f33096b4c3b72a8ca3e83beb11d3f1e5Whois.pl is a remote exploit for Fastgraf's whois.cgi perl script.
cab6f0b2ef5ed6f5bb75170b42fd55acGNU tar follows symlinks blindly, a problem if you untar as root.
600ae24fbc5281fc8a5b4b3c636d3903Fastgraf's whois.cgi perl script lacks meta character checking, allowing remote users to execute arbitrary commands as uid of the webserver.
ea926901a6a2bcf609f547f5d7968695
© 2012 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed