< Back to JetLib.com

jetlib.sec » Tags » audit

« Expand/Collapse

15 items tagged "audit"

Related tags: glibc [+], escalation [+], ssl [+], root exploit [+], privilege [+], exploits [+], audit privilege [+], web servers [+], vulnerability [+], sslaudit [+], nss [+], dso [+], ciphers [+], vault [+], tls [+], teammate [+], system [+], syscall [+], shell scripts [+], security levels [+], security [+], sectool [+], retina [+], remote shell [+], read [+], oracle [+], open [+], multiple [+], management software suite [+], management [+], linux kernel [+], linker [+], intrusion detection system [+], graphical frontend [+], gnu c library [+], gnu [+], gauntlet firewall [+], code execution [+], call security [+], audit system [+], audit management [+], Countermeasures [+]

January 05, 2012
17:29
eEye Retina Audit Script Execution of Arbitrary Code
» ‎ SecuriTeam

eEye Retina audit scripts have the capability to run remote shell scripts in order to determine vulnerable applications. One audit script in particular (audit ID 2499) uses find(1) and execute (-exec) when assessing a vulnerability within Gauntlet Firewall. An attacker who can write an executable file in the portion of the file system searched with the find command may be able to exploit this vulnerability to execute arbitrary code with the same privileges provided to Retina to perform a vulnerability scan.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: vulnerability retina audit gauntlet-firewall shell-scripts remote-shell

November 10, 2011
7:53
glibc LD_AUDIT Privilege Escalation
» ‎ Packet Storm Security Exploits

glibc LD_AUDIT arbitrary DSO load local root exploit that leverages a race condition to escalate privileges.
Tags: glibc audit privilege audit-privilege root-exploit escalation

7:53
glibc LD_AUDIT Privilege Escalation
» ‎ Packet Storm Security Recent Files

glibc LD_AUDIT arbitrary DSO load local root exploit that leverages a race condition to escalate privileges.
Tags: glibc audit privilege audit-privilege root-exploit escalation

7:53
glibc LD_AUDIT Privilege Escalation
» ‎ Packet Storm Security Misc. Files

glibc LD_AUDIT arbitrary DSO load local root exploit that leverages a race condition to escalate privileges.
Tags: glibc audit privilege audit-privilege root-exploit escalation

November 09, 2011
21:00
[local exploits] - glibc LD_AUDIT arbitrary DSO load Privilege Escalation
» ‎ 1337day (was: Inj3ct0r, 1337db)

[local exploits] - glibc LD_AUDIT arbitrary DSO load Privilege Escalation
Tags: glibc audit dso escalation exploits
14:00
[local exploits] - glibc LD_AUDIT arbitrary DSO load Privilege Escalation
» ‎ 1337day (was: Inj3ct0r, 1337db)

[local exploits] - glibc LD_AUDIT arbitrary DSO load Privilege Escalation
Tags: glibc audit dso escalation exploits

January 19, 2011
0:00
Vuln: Oracle Audit Vault CVE-2010-4449 Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

Oracle Audit Vault CVE-2010-4449 Remote Code Execution Vulnerability
Tags: oracle vault audit code-execution vulnerability

October 22, 2010
14:00
[local exploits] - GNU C library dynamic linker LD_AUDIT arbitrary DSO load Vulnerability
» ‎ 1337day (was: Inj3ct0r, 1337db)

[local exploits] - GNU C library dynamic linker LD_AUDIT arbitrary DSO load Vulnerability
Tags: audit gnu linker gnu-c-library exploits
August 25, 2010
12:41
TeamMate Audit Management Software Suite DLL Hijacking Exploit
» ‎ 1337day (was: Inj3ct0r, 1337db)

TeamMate Audit Management Software Suite DLL Hijacking Exploit
Tags: management audit teammate management-software-suite audit-management

June 03, 2010
1:53
sectool – Security Audit Tool & IDS
» ‎ Darknet

sectool is a security tool that can be used both as a security audit as well as a part of an intrusion detection system. It consists of set of tests, library and textual/graphical frontend. Tests are sorted into groups and security levels. Administrators can run selected tests, groups or whole security levels. Security Levels Naive [...]

Read the full post at darknet.org.uk

Tags: sectool audit security read intrusion-detection-system graphical-frontend security-levels Countermeasures

May 21, 2010
1:00
Open-AudIT Multiple vulnerabilities
» ‎ 1337day (was: Inj3ct0r, 1337db)

Open-AudIT Multiple vulnerabilities
Tags: multiple audit open

February 11, 2010
19:00
SSL/TLS Audit
» ‎ darkc0de

SSL/TLS Audit
Tags: tls ssl audit

February 10, 2010
17:00
sslaudit.zip
» ‎ Packet Storm Security Tools

Developed as part of G-SEC's investigation for the Secure SSL/TLS configuration Report 2010 , they developed this little tool called SSL Audit. SSL Audit scans web servers for SSL support, unlike other tools it is not limited to ciphers supported by SSL engines such as OpenSSL or NSS and can detect all known cipher suites. It also has a fingerprinting mode.
Tags: sslaudit ssl audit web-servers ciphers nss

17:00
sslaudit.zip
» ‎ Packet Storm Security Recent Files

Developed as part of G-SEC's investigation for the Secure SSL/TLS configuration Report 2010 , they developed this little tool called SSL Audit. SSL Audit scans web servers for SSL support, unlike other tools it is not limited to ciphers supported by SSL engines such as OpenSSL or NSS and can detect all known cipher suites. It also has a fingerprinting mode.
Tags: sslaudit ssl audit web-servers ciphers nss

February 02, 2010
0:00
Vuln: Linux Kernel Audit System 'audit_syscall_entry()' System Call Security Bypass Vulnerability
» ‎ SecurityFocus Vulnerabilities

Linux Kernel Audit System 'audit_syscall_entry()' System Call Security Bypass Vulnerability
Tags: syscall system audit linux-kernel call-security audit-system