what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from David Watson

umountFlaw.txt

Posted Sep 13, 2005

Authored by David Watson

The Linux umount command as provided in the util-linux package in versions 2.8 to 2.12q, 2.13-pre1 and 2.13-pre2, allows for bypass of the nosuid and nodev when a user uses the -r option.

tags | advisory

systems | linux

SHA-256 | 9536b7be9fa39bf6d7245bade27ac38d2b961b78e3a9de5e7aa119217548696f

Download | Favorite | View

getmailroot.txt

Posted Sep 21, 2004

Authored by David Watson

getmail versions 3.2.5 and version 4 releases prior to 4.2.0 suffer from a symbolic link vulnerability that allows for privilege escalation.

tags | advisory

SHA-256 | 1ede5e8f95847bac68ac6e0bcf37788047f31e767417bebac5e0d47ac997e9d2

Download | Favorite | View