IntelDatasetRejected:apache2 - Historique des versions

HackBBS le 10 septembre 2024 à 17:24

2024-09-10T17:24:06Z

← Version précédente		Version du 10 septembre 2024 à 19:24
Ligne 17 :		Ligne 17 :
	{<br />		{<br />
	"description": "./srclib/apr/file_io/netware/filestat.c:136: [5] (race) chmod: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchmod( ) instead.",<br />		"description": "./srclib/apr/file_io/netware/filestat.c:136: [5] (race) chmod: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchmod( ) instead.",<br />
			"author": "korigan",<br />
			"comment": "File not found"<br />
			},<br />
			{<br />
			"description": "./srclib/apr/build/aplibtool.c:172: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused).",<br />
	"author": "korigan",<br />		"author": "korigan",<br />
	"comment": "File not found"<br />		"comment": "File not found"<br />
	}<br />		}<br />
	]		]

HackBBS le 10 septembre 2024 à 17:07

2024-09-10T17:07:16Z

← Version précédente		Version du 10 septembre 2024 à 19:07
Ligne 12 :		Ligne 12 :
	{<br />		{<br />
	"description": "./srclib/apr/threadproc/win32/proc.c:297: [5] (misc) SetSecurityDescriptorDacl: Never create NULL ACLs; an attacker can set it to Everyone (Deny All Access), which would even forbid administrator access (CWE-732).",<br />		"description": "./srclib/apr/threadproc/win32/proc.c:297: [5] (misc) SetSecurityDescriptorDacl: Never create NULL ACLs; an attacker can set it to Everyone (Deny All Access), which would even forbid administrator access (CWE-732).",<br />
			"author": "korigan",<br />
			"comment": "File not found"<br />
			},<br />
			{<br />
			"description": "./srclib/apr/file_io/netware/filestat.c:136: [5] (race) chmod: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchmod( ) instead.",<br />
	"author": "korigan",<br />		"author": "korigan",<br />
	"comment": "File not found"<br />		"comment": "File not found"<br />
	}<br />		}<br />
	]		]

HackBBS le 10 septembre 2024 à 16:56

2024-09-10T16:56:59Z

← Version précédente		Version du 10 septembre 2024 à 18:56
Ligne 7 :		Ligne 7 :
	{<br />		{<br />
	"description": "./srclib/apr/file_io/unix/filestat.c:179: [5] (race) chmod: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchmod( ) instead.",<br />		"description": "./srclib/apr/file_io/unix/filestat.c:179: [5] (race) chmod: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchmod( ) instead.",<br />
			"author": "korigan",<br />
			"comment": "File not found"<br />
			},<br />
			{<br />
			"description": "./srclib/apr/threadproc/win32/proc.c:297: [5] (misc) SetSecurityDescriptorDacl: Never create NULL ACLs; an attacker can set it to Everyone (Deny All Access), which would even forbid administrator access (CWE-732).",<br />
	"author": "korigan",<br />		"author": "korigan",<br />
	"comment": "File not found"<br />		"comment": "File not found"<br />
	}<br />		}<br />
	]		]

HackBBS le 10 septembre 2024 à 16:55

2024-09-10T16:55:47Z

← Version précédente		Version du 10 septembre 2024 à 18:55
Ligne 4 :		Ligne 4 :
	"author": "korigan",<br />		"author": "korigan",<br />
	"comment": "This is part of the try_chown function.\nThis function is called by socache_dbm_init when the superuser run the program only.\nThe files impacted are {db, dir, pag} files. Those suffixes are hardcoded and cannot be manipulated.\nThose files contains non executable data only.\nAn attacker would need to already have root privs or already have the low privileges required to access the targeted data files.\nThis entry cannot lead to an RCE."<br />		"comment": "This is part of the try_chown function.\nThis function is called by socache_dbm_init when the superuser run the program only.\nThe files impacted are {db, dir, pag} files. Those suffixes are hardcoded and cannot be manipulated.\nThose files contains non executable data only.\nAn attacker would need to already have root privs or already have the low privileges required to access the targeted data files.\nThis entry cannot lead to an RCE."<br />
			},<br />
			{<br />
			"description": "./srclib/apr/file_io/unix/filestat.c:179: [5] (race) chmod: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchmod( ) instead.",<br />
			"author": "korigan",<br />
			"comment": "File not found"<br />
	}<br />		}<br />
	]		]

Korigan : Révocation d’une modification réalisée par HackBBS (discussion) et restauration de la dernière version réalisée par Korigan

2024-09-10T16:54:09Z

Révocation d’une modification réalisée par HackBBS (discussion) et restauration de la dernière version réalisée par Korigan

← Version précédente		Version du 10 septembre 2024 à 18:54
Ligne 1 :		Ligne 1 :
	~~toto3~~		[<br />
			{<br />
			"description": "./modules/cache/mod_socache_dbm.c:106: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.",<br />
			"author": "korigan",<br />
			"comment": "This is part of the try_chown function.\nThis function is called by socache_dbm_init when the superuser run the program only.\nThe files impacted are {db, dir, pag} files. Those suffixes are hardcoded and cannot be manipulated.\nThose files contains non executable data only.\nAn attacker would need to already have root privs or already have the low privileges required to access the targeted data files.\nThis entry cannot lead to an RCE."<br />
			}<br />
			]

HackBBS : Contenu remplacé par « toto3 »

2024-09-10T16:51:34Z

Contenu remplacé par « toto3 »

← Version précédente		Version du 10 septembre 2024 à 18:51
Ligne 1 :		Ligne 1 :
	~~[<br />~~		toto3
	~~{<br />~~
	"description": "./modules/cache/mod_socache_dbm.c:106: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.",<br />
	~~"author": "korigan",<br />~~
	"comment": "This is part of the try_chown function.\nThis function is called by socache_dbm_init when the superuser run the program only.\nThe files impacted are {db, dir, pag} files. Those suffixes are hardcoded and cannot be manipulated.\nThose files contains non executable data only.\nAn attacker would need to already have root privs or already have the low privileges required to access the targeted data files.\nThis entry cannot lead to an RCE."<br />
	~~}<br />~~
	]

Korigan le 10 septembre 2024 à 16:32

2024-09-10T16:32:54Z

← Version précédente		Version du 10 septembre 2024 à 18:32
Ligne 6 :		Ligne 6 :
	}<br />		}<br />
	]		]

	~~big vchange~~

Korigan le 10 septembre 2024 à 16:32

2024-09-10T16:32:43Z

← Version précédente		Version du 10 septembre 2024 à 18:32
Ligne 6 :		Ligne 6 :
	}<br />		}<br />
	]		]

			big vchange

Korigan : Page créée avec « [
{
"description": "./modules/cache/mod_socache_dbm.c:106: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.",
"author": "korigan",
"comment": "This is part of the try_chown function.\nThis function is called by socache_dbm_init when the superuser run the program only.\nThe files impacted are {db, dir, pag} files.... »

2024-05-09T23:03:22Z

Page créée avec « [ { "description": "./modules/cache/mod_socache_dbm.c:106: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.", "author": "korigan", "comment": "This is part of the try_chown function.\nThis function is called by socache_dbm_init when the superuser run the program only.\nThe files impacted are {db, dir, pag} files.... »

Nouvelle page

[ 
{ 
"description": "./modules/cache/mod_socache_dbm.c:106: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead.", 
"author": "korigan", 
"comment": "This is part of the try_chown function.\nThis function is called by socache_dbm_init when the superuser run the program only.\nThe files impacted are {db, dir, pag} files. Those suffixes are hardcoded and cannot be manipulated.\nThose files contains non executable data only.\nAn attacker would need to already have root privs or already have the low privileges required to access the targeted data files.\nThis entry cannot lead to an RCE." 
} 
]

IntelDatasetRejected:apache2 - Historique des versions

HackBBS le 10 septembre 2024 à 17:24

HackBBS le 10 septembre 2024 à 17:07

HackBBS le 10 septembre 2024 à 16:56

HackBBS le 10 septembre 2024 à 16:55

Korigan : Révocation d’une modification réalisée par HackBBS (discussion) et restauration de la dernière version réalisée par Korigan

HackBBS : Contenu remplacé par « toto3 »

Korigan le 10 septembre 2024 à 16:32

Korigan le 10 septembre 2024 à 16:32

Korigan : Révocation d’une modification réalisée par HackBBS (discussion) et restauration de la dernière version réalisée par Korigan

HackBBS : Contenu remplacé par « toto3 »