Test Kennung:	1.3.6.1.4.1.25623.1.0.11136
Kategorie:	Gain a shell remotely
Titel:	/bin/login overflow exploitation
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: There is a bug in the remote /bin/login which allows an attacker to gain a shell on this host, without even sending a shell code. An attacker may use this flaw to log in as any user (except root) on the remote host. Solution : See http://www.cert.org/advisories/CA-2001-34.html Risk factor : High
Querverweis:	BugTraq ID: 3681 BugTraq ID: 5848 Common Vulnerability Exposure (CVE) ID: CVE-2001-0797 AIX APAR: IY26221 http://www-1.ibm.com/support/search.wss?rs=0&q=IY26221&apar=only http://www.securityfocus.com/bid/3681 Bugtraq: 20011214 Sun Solaris login bug patches out (Google Search) http://marc.info/?l=bugtraq&m=100844757228307&w=2 Bugtraq: 20011219 Linux distributions and /bin/login overflow (Google Search) http://www.securityfocus.com/archive/1/246487 Caldera Security Advisory: CSSA-2001-SCO.40 ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.40/CSSA-2001-SCO.40.txt http://www.cert.org/advisories/CA-2001-34.html CERT/CC vulnerability note: VU#569272 http://www.kb.cert.org/vuls/id/569272 ISS Security Advisory: 20011212 Buffer Overflow in /bin/login http://xforce.iss.net/alerts/advise105.php https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2025 SGI Security Advisory: 20011201-01-I ftp://patches.sgi.com/support/free/security/advisories/20011201-01-I Sun Security Bulletin: 00213 http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/213 Sun Bug ID: 4516885 XForce ISS Database: telnet-tab-bo(7284) https://exchange.xforce.ibmcloud.com/vulnerabilities/7284
Copyright	This script is Copyright (C) 2002 Renaud Deraison

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.