CVE-2002-0537

The CVE-2002-0537 entry concerns StepWeb Search Engine (SWS) 2.5 where passwords are stored in links to manager.pl within the admin.html page. This design allows remote attackers who can access admin.html to gain administrative privileges on SWS. The description in multiple sources confirms the v...

[NT] Spooky Login SQL Injection Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...

CVE-2002-0165

CVE-2002-0165 concerns LogWatch 2.5, where local users could gain root privileges via a symlink attack in the logwatch temporary directory. The initial description provides the vulnerability scope but does not specify affected patch versions, mitigations, or other details. No connected documents ...

CVE-2000-1196

Netscape PublishingXpert 2.5 before SP2 is affected by CVE-2000-1196 via PSCOErrPage.htm. The PSUser/PSCOErrPage.htm CGI mishandles the errPagePath parameter, allowing an attacker to read arbitrary files on the target system (information disclosure). CVSS info from NVD indicates network-vector, l...

CVE-1999-1140

CrackLib 2.5 is vulnerable to a local privilege escalation via a buffer overflow caused by a long GECOS field, enabling root privileges. The CVE-1999-1140 entry cites a local attack vector with high impact (C/C/I/A) and a base score of 7.2. No explicit remediation or exploit details are provided ...

CVE-2002-0089

The CVE-2002-0089 issue affects Sun Solaris admintool across Solaris 2.5 through 8 (SPARC/x86). The vulnerability is a buffer overflow in admintool triggered by long strings in two input vectors: (1) the -d command line option and (2) the PRODVERS variable in the .cdtoc file. This can allow a loc...

CVE-1999-1026

aspppd on Solaris 2.5 x86 allows local users to modify arbitrary files and gain root privileges via a symlink attack on the /tmp/.asppp.fifo file...

CVE-1999-1026

CVE-1999-1026 affects aspppd on Solaris 2.5 x86. The vulnerability arises from a symlink attack on the temporary file /tmp/.asppp.fifo, enabling local users to modify arbitrary files and escalate to root privileges. Exploitation details are not provided beyond the described symlink surface, and t...

CVE-1999-1158

CVE-1999-1158 describes a buffer overflow in Solaris PAM (versions 2.5.1/2.5) and unix_scheme (Solaris 2.3/2.4) that lets local users gain root privileges through programs that use these modules (e.g., passwd, yppasswd, nispasswd). The root cause is a buffer overflow in the affected modules, enab...

CVE-1999-1295

Transarc DCE Distributed File System DFS 1.1 for Solaris 2.4 and 2.5 does not properly initialize the grouplist for users who belong to a large number of groups, which could allow those users to gain access to resources that are protected by DFS...

CVE-2001-0213

Buffer overflow in pi program in PlanetIntra 2.5 allows remote attackers to execute arbitrary commands...

CVE-2001-0213

CVE-2001-0213 describes a buffer overflow in the PlanetIntra 2.5 “pi” program that allows remote attackers to perform arbitrary command execution. The vulnerability is triggered by malformed input to the pi component, enabling an attacker to potentially take control of the affected system. Docume...

CVE-2000-0312

OpenBSD 2.5 cron is affected. A local user can exploit an argv[] that is not NULL terminated, which is passed to cron’s fake popen function, to gain root privileges.

Solaris /usr/bin/cu Vulnerability

Description The /usr/bin/cu command contains a buffer overflow, the problem occurs when it copy his own name argv0 to an internal variable without checking out its lenght and this causes the overflow. Vulnerable Versions Sun Solaris 2.4 Sun Solaris 2.5 Sun Solaris 2.5.1 Sun Solaris 2.6 Sun Solari...

Solaris 2.5/2.5.1 - 'getgrnam()' Local Overflow

include include / getgrnam function overflow. works against Solaris 2.5/2.5.1 SPARC default offset should work. Pablo Sor, Buenos Aires, Argentina. [email protected] / uchar shell = "\x82\x10\x20\xca\xa6\x1c\xc0\x13\x90\x0c\xc0\x13\x92\x0c\xc0\x13"...

Solaris 2.5 / 2.5.1 getgrnam() Local Overflow Exploit

Exploit for solaris platform in category local exploits ===================================================== Solaris 2.5 / 2.5.1 getgrnam Local Overflow Exploit ===================================================== include include / getgrnam function overflow. works against Solaris 2.5/2.5.1 SPA...

Old getgrnam() Solaris 2.5 vulnerability

Hi Old versions of Solaris, 2.5/2.5.1 without patch contain an exploitable buffer overflow in getgrnam libc function. Sorry if this is already know, it seems an old problem but i failed searching it in the bugtraq archives. This vulnerability may be used in newgrp command. bye Pablo Sor...

WebsitePro Remote Request Overflow

The remote web server is WebSitePro 2.5. There are remotely-exploitable buffer overflow vulnerabilities in releases of WebSitePro prior to 2.5. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid10476;...

CVE-1999-0838

Concrete details from connected documents show that Serv-U FTP before version 2.5e is affected by multiple issues: a buffer overflow in the SERVER when processing the SITE command can cause a denial of service, and a path disclosure via CWD commands for nonexistent directories can reveal the root...

CVE-1999-0458

The CVE-1999-0458 entry concerns L0phtcrack 2.5, which creates temporary files in the system TEMP directory. The underlying issue is that these temporary files could contain password information, exposing partial confidentiality of credentials. The available connected Red Hat and CVE listing refe...