.:[ packet storm ]:.
                           
trust nothing
trust nothing

 ///  File Name:05.19.09-1.txt
Description:
iDefense Security Advisory 05.19.09 - Local exploitation of a file overwrite vulnerability in IBM Corp.'s Advanced Interactive eXecutive (AIX) could allow an attacker to overwrite arbitrary files and execute arbitrary code. The AIX libc implementation of malloc includes a debugging mechanism that is initiated by setting the MALLOCTYPE and MALLOCDEBUG environment variables. This debugging feature writes to a user-specified log file under certain conditions. There is a gap in time between the checks to see if the file is a symbolic link and the process of opening the file. If an attacker can change the file to be a symbolic link to another file within this time frame, it is possible to cause a set-uid binary to write to files owned by privileged users. iDefense confirmed the existence of this vulnerability in IBM Corp.'s AIX version 5.3. Other versions may also be affected.
Homepage:http://www.idefense.com/
File Size:3014
Last Modified:May 21 02:26:05 2009
MD5 Checksum:f5df636d3549f48d5c7b51f6d5d3826e

 .:. Back
 

 ///  Last 10 Files
  1. :· flashquiz-sql.txt
  2. :· groupwise-xss.txt
  3. :· zaocms-disclose.txt
  4. :· zaocms-insecure.txt
  5. :· articledir-blindsql.txt
  6. :· MDVSA-2009-121.txt
  7. :· MDVSA-2009-120.txt
  8. :· articledirectory-sql.txt
  9. :· jobscript-upload.txt
  10. :· Reverse_Engineering.pdf
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Advisories
  1. :· MDVSA-2009-121.txt
  2. :· MDVSA-2009-120.txt
  3. :· DDIVRT-2009-25.txt
  4. :· 05.19.09-1.txt
  5. :· cisco-sa-20090520-cw.txt
  6. :· dsa-1804-1.txt
  7. :· dsa-1803-1.txt
  8. :· macosxjava-poc.txt
  9. :· USN-777-1.txt
  10. :· ZDI-09-023.txt
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Exploits
  1. :· flashquiz-sql.txt
  2. :· groupwise-xss.txt
  3. :· zaocms-disclose.txt
  4. :· zaocms-insecure.txt
  5. :· articledir-blindsql.txt
  6. :· articledirectory-sql.txt
  7. :· jobscript-upload.txt
  8. :· aspinlinecc-sqlxss.txt
  9. :· vicidial-sql.txt
  10. :· chinagames-exec.txt
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Tools
  1. :· pdfresurrect-v0_5.tar.gz
  2. :· ProxyHarvest.txt
  3. :· mandos_1.0.10.orig.tar.gz
  4. :· darkTouch.txt
  5. :· rsbac-common-2.6-1.4.2.tar.bz2
  6. :· draugr.tar.gz
  7. :· httpsScanner-1.1.tgz
  8. :· ratproxy-1.58.tar.gz
  9. :· truecrypt-6.2-source.tar.gz
  10. :· fwknop-1.9.11.tar.gz
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Misc
  1. :· Reverse_Engineering.pdf
  2. :· AppsecEU09_CarettoniDiPaola_v0.8.pdf
  3. :· pbania-spiderpig2008.pdf
  4. :· md5db11.txt
  5. :· linuxbind-shellcode.txt
  6. :· freebsdx86-shellcode.txt
  7. :· xcon2009-cfp.txt
  8. :· ie8-utf7.txt
  9. :· native_thread_injection.pdf
  10. :· libntlm-1.1.tar.gz
[ Last 20 | Last 50 | Last 100 ]


 .:. TopPrivacy Statement | Copyright Notice