mirror of
https://gitlab.com/kalilinux/packages/unix-privesc-check.git
synced 2026-09-08 18:12:23 +00:00
105 lines
3.1 KiB
Plaintext
105 lines
3.1 KiB
Plaintext
2010-12-30 unix-privesc-check trunk
|
|
|
|
* Bug fix: Cleaned up a typo
|
|
* Added support for fscaps
|
|
* Updated CHANGELOG
|
|
|
|
-- Tim Brown <timb@nth-dimension.org.uk>
|
|
|
|
2010-11-09 unix-privesc-check trunk
|
|
|
|
* Bug fix: False positive if svn.simple directory is empty
|
|
|
|
-- <pentestmonkey@pentestmonkey.net>
|
|
|
|
2010-11-04 unix-privesc-check trunk
|
|
|
|
* Added unique issue numbers. Should help to generate reports
|
|
|
|
-- <pentestmonkey@pentestmonkey.net>
|
|
|
|
2010-04-17 unix-privesc-check trunk
|
|
|
|
* Bug fix: Now checks HP-UX swap permissions correctly
|
|
* Bug fix: Cleaned up a few typos
|
|
|
|
-- Tim Brown <timb@nth-dimension.org.uk>
|
|
|
|
2010-09-27 unix-privesc-check trunk
|
|
|
|
* Added check for cleartext subversion passwords in home directory
|
|
|
|
-- <pentestmonkey@pentestmonkey.net>
|
|
|
|
2010-01-06 unix-privesc-check trunk
|
|
|
|
* Added support for exploit mitigations (HP-UX and Solaris)
|
|
* Checks if shadow and passwd are writable, thanks jdv
|
|
* Checks for SetUID shell scripts which might be racey
|
|
* Improved NX and SSP checks (Linux only)
|
|
* Bug fix: Cleaned up a few typos
|
|
|
|
-- Tim Brown <timb@nth-dimension.org.uk>
|
|
|
|
2009-09-23 unix-privesc-check trunk
|
|
|
|
* Bug fix: Cron jobs starting with '(' parsed properly
|
|
* Checks perms on Java classpath
|
|
|
|
-- <pentestmonkey@pentestmonkey.net>
|
|
|
|
2009-09-06 unix-privesc-check trunk
|
|
|
|
* Added MMAP allows map to 0 exploit mitigation (Linux ATM)
|
|
* Added SELinux exploit mitigation (Linux only)
|
|
|
|
-- Tim Brown <timb@nth-dimension.org.uk>
|
|
|
|
2009-07-30 unix-privesc-check v1.5
|
|
|
|
* Initial AIX support added
|
|
* Check for exploit mitigations (Linux only ATM)
|
|
* Brain dumped some more interesting things to check for into TODOs
|
|
* Bug fix: Fixed typos in comments
|
|
* Added SSP exploit mitigation (Linux only ATM)
|
|
|
|
-- Tim Brown <timb@nth-dimension.org.uk>
|
|
|
|
2008-11-23 unix-privesc-check v1.4
|
|
|
|
* Added check of file perms of shared libraries used by SUID programs
|
|
* Tidied output slightly
|
|
|
|
2008-11-09 unix-privesc-check v1.3
|
|
|
|
* Bug fix: Parts of the script only worked with /bin/bash and not /bin/sh
|
|
* Bug fix: Fixed typos in reporting for privescs via cron
|
|
|
|
2008-07-06 unix-privesc-check v1.2
|
|
|
|
* Added check of library dirs (/etc/ld.so.conf) for Linux
|
|
* Crude check of programs called from shell scripts
|
|
* Check of libraries used by each binary program (using ldd)
|
|
* Check of hard-coded paths within binaries (using strings)
|
|
* More verbose WARNING messages. All the explanation for a WARNING
|
|
should now be on one line so you can grep for 'WARNING' and still
|
|
understand the results
|
|
* Check of file perms on open file handles of running processes
|
|
* Check for running SSH agent. Lists keys if possible
|
|
* Check for public and private SSH keys in home directories
|
|
* Check for running GPG agent
|
|
* Check for cron jobs in /var/spool/cron/tabs
|
|
* Extra non-priv check for local postgres trusts
|
|
* Bug fix: lanscan now used on HPUX to get interface names
|
|
* Check if system is an NFS client (HPUX only)
|
|
* Check if swap space is readable / writable
|
|
|
|
2008-04-17 unix-privesc-check v1.1
|
|
|
|
* Added check for accounts with no password in /etc/passwd
|
|
* Record some basic info about the host (hostname, uname -a, interface IPs)
|
|
|
|
2008-02-01 unix-privesc-check v1.0
|
|
|
|
* Initial public release
|