«
Expand/Collapse
137 items tagged "group"
Related tags:
tiff image [+],
libtiff [+],
image buffer [+],
cross [+],
ccitt [+],
buffer overflow vulnerability [+],
todd miller [+],
office [+],
local privilege escalation [+],
group office [+],
e commerce group [+],
day [+],
commerce group [+],
e commerce [+],
vpn implementation [+],
implementation [+],
hacker group [+],
hacker [+],
cisco ipsec [+],
cisco vpn [+],
cisco pix [+],
arbitrary code [+],
vulnerability [+],
pranian [+],
php [+],
media [+],
information disclosure vulnerability [+],
webapps [+],
vulnerabilities [+],
ubuntu [+],
symmetric encryption [+],
sudo command [+],
slang [+],
selection [+],
security [+],
remote shell [+],
red hat security [+],
red [+],
php news [+],
network authentication system [+],
nafis [+],
n.e.t. e commerce [+],
media group [+],
mandriva linux [+],
majalty [+],
magnolia [+],
lostmon [+],
iran [+],
hat [+],
group selection [+],
gain root privileges [+],
formula group [+],
formula [+],
forgery [+],
enumeration [+],
development group [+],
development [+],
design group [+],
design [+],
default installation [+],
command execution [+],
command [+],
cisco adaptive [+],
bugzilla [+],
bugtraq [+],
ariatel [+],
alexander kurtz [+],
wuethrich [+],
sites [+],
series concentrators [+],
series [+],
security appliances [+],
policy [+],
phishing [+],
permission [+],
pars [+],
news [+],
n.e.t e commerce [+],
markus wuethrich [+],
maildrop [+],
iwd [+],
india [+],
ifp [+],
hackaday [+],
group permission [+],
geek [+],
fwd [+],
escalation [+],
desc [+],
def con [+],
chennai india [+],
chennai [+],
call for papers [+],
call [+],
attacker [+],
sql injection [+],
xpen [+],
working group [+],
working [+],
wikileaks [+],
wi fi [+],
web group [+],
web [+],
vpn [+],
vows [+],
version [+],
unmanned ocean [+],
technique [+],
tax woes [+],
tax exempt status [+],
tax [+],
targets [+],
supplementary [+],
successes [+],
stack overflow [+],
st. louis [+],
spectrum [+],
sniff [+],
single group [+],
sid [+],
show [+],
shell [+],
share ideas [+],
script [+],
saudisoftech [+],
sailboat [+],
safer use [+],
safari for windows [+],
rpcclient [+],
robots [+],
remote [+],
read [+],
reactor [+],
raymond forbes [+],
raids [+],
puppet [+],
protocol igmp [+],
pinta [+],
php sql [+],
php addressbook [+],
phil [+],
peer group [+],
pcb [+],
pc administrator [+],
orlando florida [+],
online [+],
oic [+],
new [+],
more [+],
mine [+],
microsoft [+],
michigan [+],
martinique [+],
links [+],
link dos [+],
launches [+],
k meleon [+],
iwd group [+],
issue [+],
ireland [+],
internet group management protocol [+],
internet group management [+],
internet [+],
innovative media group [+],
implementation group [+],
housing group [+],
housing [+],
hackerspace [+],
guid [+],
group version [+],
group talks [+],
group show [+],
group power [+],
group orders [+],
group news [+],
group data [+],
group cat [+],
grand rapids michigan [+],
grand rapids [+],
grand opening [+],
government businesses [+],
good resources [+],
forbes [+],
financial institutions [+],
fbi [+],
elgg [+],
domain admin [+],
dll [+],
dissolution [+],
directory [+],
defends [+],
data modem [+],
data breach [+],
crack [+],
convertor [+],
consumer privacy [+],
consumer group [+],
consulting group [+],
consulting [+],
congresswoman [+],
conficker [+],
commerce [+],
claims [+],
cisco ios [+],
cat [+],
caribbean [+],
capacitor [+],
camaraderie [+],
burst data [+],
body scanners [+],
black hat [+],
beta2 [+],
axis [+],
august 1 [+],
arch [+],
anonymous [+],
alqatari [+],
alkon [+],
admins group [+],
administration side [+],
admin [+],
addressbook [+],
active directory [+],
accused [+],
aberystwyth university [+],
Software [+],
Pentesting [+],
Hackerspaces [+],
HackIt [+],
General [+],
Discussion [+],
sql [+],
sudo [+],
runas [+],
dow [+],
txt [+],
privilege escalation vulnerability [+]
-
-
13:01
»
Hack a Day
We’re happy to see some links rolling in from our call for Hackerspace introductions. This is sort of a reintroduction of The Geek Group. They’ve been around for a while and we’ve featured several interesting projects coming out of the collective (check out this pulse capacitor autopsy). You may remember some tax woes they ran into [...]
-
-
7:29
»
Packet Storm Security Advisories
Red Hat Security Advisory 2012-0306-03 - Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted third-party, the Key Distribution Center. It was found that ftpd, a Kerberos-aware FTP server, did not properly drop privileges. On Red Hat Enterprise Linux 5, the ftpd daemon did not check for the potential failure of the effective group ID change system call. If the group ID change failed, a remote FTP user could use this flaw to gain unauthorized read or write access to files that are owned by the root group.
-
7:29
»
Packet Storm Security Recent Files
Red Hat Security Advisory 2012-0306-03 - Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted third-party, the Key Distribution Center. It was found that ftpd, a Kerberos-aware FTP server, did not properly drop privileges. On Red Hat Enterprise Linux 5, the ftpd daemon did not check for the potential failure of the effective group ID change system call. If the group ID change failed, a remote FTP user could use this flaw to gain unauthorized read or write access to files that are owned by the root group.
-
7:29
»
Packet Storm Security Misc. Files
Red Hat Security Advisory 2012-0306-03 - Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted third-party, the Key Distribution Center. It was found that ftpd, a Kerberos-aware FTP server, did not properly drop privileges. On Red Hat Enterprise Linux 5, the ftpd daemon did not check for the potential failure of the effective group ID change system call. If the group ID change failed, a remote FTP user could use this flaw to gain unauthorized read or write access to files that are owned by the root group.
-
-
7:46
»
Packet Storm Security Exploits
Dow Group suffers from multiple remote SQL injection vulnerabilities in dynamic.php, news_desc.php, product.php, and solutions.php.
-
-
18:39
»
SecuriTeam
Cisco IPSec VPN Implementation suffers from a Group Name Enumeration Vulnerability.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
14:26
»
Packet Storm Security Advisories
The Cisco IPSec VPN implementation suffers from a group name enumeration vulnerability. Systems affected include the ASA 5500 Series Adaptive Security Appliances, Cisco PIX 500 Series Security Appliances, Cisco VPN 3000 Series Concentrators.
-
14:26
»
Packet Storm Security Misc. Files
The Cisco IPSec VPN implementation suffers from a group name enumeration vulnerability. Systems affected include the ASA 5500 Series Adaptive Security Appliances, Cisco PIX 500 Series Security Appliances, Cisco VPN 3000 Series Concentrators.
-
-
13:12
»
Packet Storm Security Advisories
Mandriva Linux Security Advisory 2011-018 - A patch for parse.c in sudo does not properly interpret a system group in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command. NOTE: this vulnerability exists because of a CVE-2009-0034 regression. check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command execution that involves a gid change but no uid change, which allows local users to bypass an intended authentication requirement via the -g option to a sudo command.
-
13:12
»
Packet Storm Security Recent Files
Mandriva Linux Security Advisory 2011-018 - A patch for parse.c in sudo does not properly interpret a system group in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command. NOTE: this vulnerability exists because of a CVE-2009-0034 regression. check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command execution that involves a gid change but no uid change, which allows local users to bypass an intended authentication requirement via the -g option to a sudo command.
-
13:12
»
Packet Storm Security Misc. Files
Mandriva Linux Security Advisory 2011-018 - A patch for parse.c in sudo does not properly interpret a system group in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command. NOTE: this vulnerability exists because of a CVE-2009-0034 regression. check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command execution that involves a gid change but no uid change, which allows local users to bypass an intended authentication requirement via the -g option to a sudo command.
-
-
18:29
»
Packet Storm Security Advisories
Ubuntu Security Notice 1046-1 - Alexander Kurtz discovered that sudo would not prompt for a password when a group was specified in the Runas_Spec. A local attacker could exploit this to execute arbitrary code as the specified group if sudo was configured to allow the attacker to use a program as this group. The group Runas_Spec is not used in the default installation of Ubuntu.
-
18:29
»
Packet Storm Security Recent Files
Ubuntu Security Notice 1046-1 - Alexander Kurtz discovered that sudo would not prompt for a password when a group was specified in the Runas_Spec. A local attacker could exploit this to execute arbitrary code as the specified group if sudo was configured to allow the attacker to use a program as this group. The group Runas_Spec is not used in the default installation of Ubuntu.
-
18:29
»
Packet Storm Security Misc. Files
Ubuntu Security Notice 1046-1 - Alexander Kurtz discovered that sudo would not prompt for a password when a group was specified in the Runas_Spec. A local attacker could exploit this to execute arbitrary code as the specified group if sudo was configured to allow the attacker to use a program as this group. The group Runas_Spec is not used in the default installation of Ubuntu.
-
-
16:24
»
Packet Storm Security Advisories
NGS Secure has discovered an enumeration vulnerability in (Cisco) Cisco VPN Concentrator, Cisco PIX and Cisco Adaptive Security Appliance.
-
-
14:50
»
SecuriTeam
A vulnerability in the Internet Group Management Protocol (IGMP) version 3 implementation of Cisco IOS Software and Cisco IOS XE Software allows a remote unauthenticated attacker to cause a reload of an affected device.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
12:00
»
Hack a Day
This is the Pinta, an autonomous sailboat built to attempt an ocean crossing from Ireland to Martinique (in the Caribbean). A group of researchers at Aberystwyth University built her as part of the Microtransat Challenge. To keep tabs on the vessel her creators included an Iridium short burst data modem with a backup system made from a SPOT [...]
-
-
23:02
»
Packet Storm Security Recent Files
Ubuntu Security Notice 983-1 - Markus Wuethrich discovered that sudo did not always verify the user when a group was specified in the Runas_Spec. A local attacker could exploit this to execute arbitrary code as root if sudo was configured to allow the attacker to use a program as a group when the attacker was not a part of that group.
-
23:01
»
Packet Storm Security Advisories
Ubuntu Security Notice 983-1 - Markus Wuethrich discovered that sudo did not always verify the user when a group was specified in the Runas_Spec. A local attacker could exploit this to execute arbitrary code as root if sudo was configured to allow the attacker to use a program as a group when the attacker was not a part of that group.
-
-
11:00
»
Hack a Day
PCB Group Orders [Phil] wrote in to let us know about the DorkbotPDX group orders. The site makes group PCB orders until a cutoff date or the panel is full. You get three copies of your design with no setup fee for just $5/square inch including domestic postage. Not a bad price. We aren’t affiliated [...]
-
-
19:11
»
Carnal0wnage
Got asked to help remotely locate local admins on boxes on a network.
rpcclient $> enumalsgroups
Usage: enumalsgroups builtin|domain [access mask]
rpcclient $> enumalsgroups builtin
group:[Administrators] rid:[0x220]
group:[Backup Operators] rid:[0x227]
group:[Guests] rid:[0x222]
group:[Network Configuration Operators] rid:[0x22c]
group:[Power Users] rid:[0x223]
group:[Remote Desktop Users] rid:[0x22b]
group:[Replicator] rid:[0x228]
group:[Users] rid:[0x221]
Now you would think that doing a querygroup would give you the right output, but actually you get a:
rpcclient $> querygroup 0x220
result was NT_STATUS_NO_SUCH_GROUP
Honestly I have no idea why this doesn't work, it *should*. If anyone knows why it doesn't I know more than one person who would like to know.
Anyway it takes one more step but you can do it this way:
rpcclient $> queryaliasmem
Usage: queryaliasmem builtin|domain rid [access mask]
rpcclient $> queryaliasmem builtin 0x220
sid:[S-1-5-21-1214440339-1383384898-839522115-500]
sid:[S-1-5-21-1214440339-1383384898-839522115-1003]
sid:[S-1-5-21-2392188729-2485841371-4291725810-512]
Then you can look up who those SIDs belong to
rpcclient $> lookupsids
Usage: lookupsids [sid1 [sid2 [...]]]
rpcclient $> lookupsids S-1-5-21-1214440339- 1383384898-839522115-500
S-1-5-21-1214440339-1383384898-839522115-500 PC\Administrator (1)
rpcclient $> lookupsids
S-1-5-21-1214440339-1383384898-839522115-1003
S-1-5-21-1214440339-1383384898-839522115-1003 PC\user (1)
rpcclient $> lookupsids
S-1-5-21-2392188729-2485841371-4291725810-512 rpc_api_pipe: Remote machine 192.168.242.128 pipe \lsarpc fnum 0x4001 returned critical error. Error was Call timed out: server did not respond after 10000 milliseconds result was NT_STATUS_IO_TIMEOUT
Not sure about the 512 (its a MS built-in account I think) but the 1003 was the user I added to the local admins group.
-
-
11:02
»
Hack a Day
Non-profit hackerspace The Geek Group has been hit with a hefty tax bill despite their tax-exempt status. We featured a boom camera built by the organization back in November. It is the goal of The Geek Group to fulfill the thirst to explore and create by providing facilities, peer group, and camaraderie that make knowledge [...]
-
-
7:58
»
Hack a Day
Here at HackaDay, we are always a fan of a group of hackers coming together to create a place to share ideas, tools, parts, and stories. A group from St. Louis called Arch Reactor have managed to secure a new location, and are having their grand opening this Saturday. From 4-10pm on the 30th, they [...]
-
-
14:10
»
remote-exploit & backtrack
A few years ago i did the A+ and recently i took the MCDST as i managed to get it free as we setup a micorsoft testing centre. i am now working as a desktop support technician in a hospital and am learning alot. i am however becoming frustrated as i really want to learn more about group policy and the server/administration side of things which comes into play alot.
A few years ago i got a complete set of books which is windows 2000 MCSE i was just going to dig them out however is it woth my while reading them or have things changed too much now since server 2003.
I have no more training resource available so i guess im looking for pointers from someone with systems experience to learn about domains, workgroup enviroments and admin/group policy.