OSVDB: Open Sourced Vulnerability Database

Browse Database - By Creditee Karol Wiesek

Researcher Name:

Karol Wiesek

Researcher Company:

Researcher Country:

Unknown

Vulnerabilities Types:

Other:	6
DOS:	1

Displaying all 7 vulnerabilities

<< Back to Browse

OSVDB ID	Disclosure Date	Title
11834 [CLOSE] OSVDB ID : 11834 - Disclosed: 2004-11-15 Description: (Description Provided by CVE) : fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to gain sensitive information by calling fcronsighup with an arbitrary file, which reveals the contents of the file that can not be parsed in an error message.	2004-11-15	Fcron fcronsighup Arbitrary Privileged File Acess
11835 [CLOSE] OSVDB ID : 11835 - Disclosed: 2004-11-15 Description: (Description Provided by CVE) : fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to bypass access restrictions and load an arbitrary configuration file by starting an suid process and pointing the fcronsighup configuration file to a /proc entry that is owned by root but modifiable by the user, such as /proc/self/cmdline or /proc/self/environ.	2004-11-15	Fcron fcronsighup Configuration Restriction Bypass
11836 [CLOSE] OSVDB ID : 11836 - Disclosed: 2004-11-15 Description: (Description Provided by CVE) : fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to delete arbitrary files or create arbitrary empty files via a target filename with a large number of leading slash (/) characters such that fcronsighup does not properly append the intended fcrontab.sig to the resulting string.	2004-11-15	Fcron fcronsighup Arbitrary File Deletion
11837 [CLOSE] OSVDB ID : 11837 - Disclosed: 2004-11-15 Description: (Description Provided by CVE) : Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restrictions and read fcron.allow and fcron.deny via the EDITOR environment variable.	2004-11-15	Fcron fcrontab File Descriptor Leak Content Disclosure
11555 [CLOSE] OSVDB ID : 11555 - Disclosed: 2004-11-09 Description: Samba server contains a flaw in ms_fnmatch.c that may allow a malicious user to cause a denial of service. The issue is triggered when a request is made for a resource which contains multiple wildcard characters; this causes the server to fall into a loop whose size grows exponentially with the number of wildcard characters used. It is possible that the flaw may allow a remote server crash, resulting in a loss of availability.	2004-11-09	Samba ms_fnmatch() Function Wildcard Matching Remote DoS
10464 [CLOSE] OSVDB ID : 10464 - Disclosed: 2004-09-30 Description: Samba contains a flaw that allows a remote attacker to gain access to files outside of the share path under the privileges of the user. With a specifically crafted request, an attacker could potentially access files outside the share's root. The issue is due to the unix_convert() and check_name() functions not properly sanitizing user input supplied via the GET, PUT and DIR commands. Samba treats the resulting input as an absolute path rather than relative path to the share.	2004-09-30	Samba MS-DOS Path Request Arbitrary File Retrieval
6107 [CLOSE] OSVDB ID : 6107 - Disclosed: 2004-05-12 Description: Several browsers contain a flaw that may allow a remote attacker arbitrary file manipulation. The issue is triggered when a specially crafted telnet URI is parsed by the browser resulting in a loss of integrity.	2004-05-12	Multiple Browser Telnet URI Handler File Manipulation

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.