1479 matches found
CVE-2000-1103
rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by specifying an alternate Trojan horse script on the command line...
Возможная проблема в BSD traceroute
Переполнение кучи при очень большой длине адреса вызываемого хоста...
Третий раз дырка в procfs в *BSD
Третий раз с 1997 года заткнута одна и таже дырка в procfs в BSD через нее, в сочетании с удаленной дыркой, был последний раз был поломан сервер http://www.freebsd.org...
BSD-derived ftpd replydirname() in ftpd.c contains one-byte overflow
Overview There is a off-by-one vulnerability in several BSD-derived ftpd servers. Description The ftp server in several BSD distributions contains a defect which allows one byte of the program memory allocated within a stack frame to be overwritten with a NUL byte '\0'. The byte in question is...
CVE-2000-0993
Format string vulnerability in pwerror function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd...
CVE-2000-0995
Format string vulnerability in OpenBSD yppasswd program and possibly other BSD-based operating systems allows attackers to gain root privileges a malformed name...
CVE-2000-1103
rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by specifying an alternate Trojan horse script on the command line...
CVE-2000-1103
CVE-2000-1103 affects BSD 3.0/4.0; the rcvtty program does not drop privileges before executing a script, enabling local privilege escalation by supplying an alternate Trojan horse script on the command line. CVSS base score 7.2 (HIGH) from NVD indicates complete impact to confidentiality, integr...
Удаленная дыра в BSD ftpd
Однобайтное переполнение стека позволяет получить привелегии root...
BSD ftpd 0.3.2 - Single Byte Buffer Overflow
source: https://www.securityfocus.com/bid/2124/info The ftp daemon derived from 4.x BSD source contains a serious vulnerability that may compromise root access. There exists a one byte overflow in the replydirname function. The overflow condition is due to an off-by-one bug that allows an attacke...
CVE-2000-0999
Format string vulnerabilities in OpenBSD ssh program and possibly other BSD-based operating systems allow attackers to gain root privileges...
CVE-2000-1010
Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that contains format characters...
PT-2000-1909 · Openbsd +1 · Openbsd Ssh +1
Name of the Vulnerable Software and Affected Versions: OpenBSD ssh affected versions not specified Description: The issue allows attackers to gain root privileges due to format string vulnerabilities in the OpenBSD ssh program, potentially affecting other BSD-based operating systems as well...
CVE-2000-0999
Technical details about CVE-2000-0999 are not provided in the connected documents. The initial description mentions format-string vulnerabilities in OpenBSD ssh but no affected versions, impact specifics, or remediation are given here. Monitor for updates.
CVE-2000-0999
Format string vulnerabilities in OpenBSD ssh program and possibly other BSD-based operating systems allow attackers to gain root privileges...
FreeBSD 3.54.x - usrbintop Format String
FreeBSD 3.54.x - usrbintop Format String / source: https://www.securityfocus.com/bid/1895/info top is a program used to display system usage statistics in real time written by GoupSys Consulting but shipped by default as a core component with many operating systems. On BSD systems, top is install...
CVE-2000-0094
procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for stderr...
CVE-2000-0094
The CVE-2000-0094 entry concerns BSD procfs allowing local privilege escalation to root by manipulating the /proc/pid/mem interface through a modified file descriptor for stderr. The vulnerability is rooted in the procfs interface and enables a local attacker to gain full privileges, as described...
ncurses buffer overflows
OVERVIEW The CRT screen handling library ncurses contains buffer overflows, making programs using it vulnerable. If the programs are setuid or setgid, a local user may elevate their privilege. The problem exists in ncurses versions 4.2 and 5.0, probably earlier, and libocurses. The overflows can ...