what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 3 of 3

Files from Harikiri

aix-snmp.txt

Posted Feb 18, 2000

Authored by Harikiri

On AIX 4.2 and 4.3, the SNMP daemon is enabled by default and two community names are enabled with read/write privileges. The community names are "private" and "system", but are only allowed from localhost connections. Nevertheless, a local user may install an SNMP client, and modify sensitive variables.

tags | exploit, local

systems | aix

SHA-256 | fca6ebe0cf09746cd05366bd5c1a1506252c063978e36c0e845128326548d809

Download | Favorite | View

vmware.htm

Posted Jan 27, 2000

Authored by Harikiri | Site w00w00.org

w00w00 Security Advisory - Linux VMware 1.1.2 Symlink Vulnerability. VMware stores temporary log files within the /tmp directory. It does not check whether all of these files exist prior to creation, resulting in the potential for a symlink attack.

tags | exploit

systems | linux

SHA-256 | da520fa5a7804353f424ed408de54dc3b46708d2f49b82447d0645507cc3049e

Download | Favorite | View

skey.htm

Posted Jan 27, 2000

Authored by Harikiri | Site w00w00.org

w00w00 Security Advisory - S/Key & OPIE Database Vulnerability affecting most Unixes (not NetBSD) running skey-2.2. (possibly earlier versions too) allowing offline password cracking.

tags | exploit

systems | netbsd

SHA-256 | 3ae33764fe45486317d0735a5c5fbdb38edd2d5553c4c986a29216ee7e9b8124

Download | Favorite | View