Suidperl 5.00503 Mail Shell Escape Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/1547/info The interaction between some security checks performed by suidperl, the setuid version of perl, and the /bin/mail program creates a scenario that allows local malicious users to execute commands with root...

RedHat 9.0,Slackware 8.1 /bin/mail Carbon Copy Field Buffer Overrun Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7760/info A vulnerability has been discovered in the Linux /bin/mail utility. The problem occurs when processing excessive data within the carbon copy field. Due to insufficient bounds checking while parsing this...

Solaris Update for usr/bin/mail 111875-09

Check for the Version of usr/bin/mail OpenVAS Vulnerability Test Solaris Update for usr/bin/mail 111875-09 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Solaris Update for usr/bin/mail 111874-09

Check for the Version of usr/bin/mail OpenVAS Vulnerability Test Solaris Update for usr/bin/mail 111874-09 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Solaris Update for usr/bin/mail 111875-09

Check for the Version of usr/bin/mail OpenVAS Vulnerability Test Solaris Update for usr/bin/mail 111875-09 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Solaris Update for usr/bin/mail 111874-09

Check for the Version of usr/bin/mail OpenVAS Vulnerability Test Solaris Update for usr/bin/mail 111874-09 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

CVE-2007-3702: Undefined Security Weakness

Directory traversal vulnerability in the load function in cgi-bin/mail/mailmachine.cgi in Mail Machine 3.989 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the archives parameter in a Load action...

Solaris 8 (sparc) : 111874-09

SunOS 5.8: usr/bin/mail patch. Date this patch was last updated by Sun : Jan/18/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-1999-1415

CVE-1999-1415 is a local privilege escalation affecting DEC ULTRIX before 4.2 via /usr/bin/mail. The available documents confirm the vulnerable component and impact (local privilege gain) but do not provide exploit details or a remediation/patch version.

CVE-1999-1438

CVE-1999-1438 affects SunOS 4.1.1 and earlier, with a vulnerability in the /bin/mail executable that allows local users to gain root privileges via certain command line arguments. The PT-1991-1012 entry confirms the affected software and behavior, but notes there is no information about a fix for...

CVE-1999-1415: Undefined Security Weakness

Vulnerability in /usr/bin/mail in DEC ULTRIX before 4.2 allows local users to gain privileges...

CVE-1999-1438: Undefined Security Weakness

Vulnerability in /bin/mail in SunOS 4.1.1 and earlier allows local users to gain root privileges via certain command line arguments...

Slackware 7.1 /usr/bin/mail Local Exploit

Exploit for linux platform in category local exploits ========================================= Slackware 7.1 /usr/bin/mail Local Exploit ========================================= / Slackware 7.1 /usr/bin/Mail Exploit give gid=1 bin if /usr/bin/Mail is setgid but it is not setgid, setuid for...

Slackware 7.1 - usrbinmail Local Privilege Escalation

Slackware 7.1 - usrbinmail Local Privilege Escalation / Slackware 7.1 /usr/bin/Mail Exploit give gid=1 bin if /usr/bin/Mail is setgid but it is not setgid, setuid for default. tested on my box sl 7.1 crazy exploited by kengz. GID.... \x01 = 1 bin \x02 = 2 , \x03 = 3 , ... \x0a = 10 \x0b = 11 .......

CVE-2000-0703: Undefined Security Weakness

suidperl aka sperl does not properly cleanse the escape sequence "!" before calling /bin/mail to send an error report, which allows local users to gain privileges by setting the "interactive" environmental variable and calling suidperl with a filename that contains the escape sequence...

PT-1991-1012 · Sun · Sunos

Name of the Vulnerable Software and Affected Versions: SunOS versions 4.1.1 and earlier Description: A issue in the /bin/mail executable allows local users to gain root privileges through specific command line arguments. Recommendations: For SunOS versions 4.1.1 and earlier, at the moment, there ...