171 matches found
CVE-1999-0694
Denial of service in AIX ptrace system call allows local users to crash the system...
IBM AIX 4.2.1 Sun Solaris 7.0 - LC_MESSAGES libc Buffer Overflow (1)
IBM AIX 4.2.1 Sun Solaris 7.0 - LCMESSAGES libc Buffer Overflow 1 source: https://www.securityfocus.com/bid/268/info A buffer overflow in libc's handling of the LCMESSAGES environment variable allows a malicious user to exploit any suid root program linked agains libc to obtain root privileges...
CVE-1999-1574
Buffer overflow in the lex routines of nslookup for AIX 4.3 may allow attackers to cause a core dump and possibly execute arbitrary code via "long input strings."...
CVE-1999-1487
Vulnerability in digest in AIX 4.3 allows printq users to gain root privileges by creating and/or modifing any file on the system...
CVE-1999-0094
AIX piodmgrsu command allows local users to gain additional group privileges...
CVE-1999-0122
Buffer overflow in AIX lchangelv gives root access...
AIX lquerylv - Local Buffer Overflow / Local Privilege Escalation
include include include char prog100="/usr/sbin/lquerylv"; char prog230="lquerylv"; extern int execv; char createvarchar name,char value char c; int l; l=strlenname+strlenvalue+4; if ! c=mallocl perror"error allocating";exit2;; strcpyc,name; strcatc,"="; strcatc,value; putenvc; return c; /The...
HP HP-UX 10.20 IBM AIX 4.1.5 - connect() Denial of Service
HP HP-UX 10.20 IBM AIX 4.1.5 - connect Denial of Service source: https://www.securityfocus.com/bid/352/info Certain versions of AIX and HP/UX contained a bug in the way the OS handled the connect system call. The connect call is used to initiate a connection on a socket. Because of the flaw in th...
HP HP-UX 10.20 / IBM AIX 4.1.5 - 'connect()' Denial of Service
source: https://www.securityfocus.com/bid/352/info Certain versions of AIX and HP/UX contained a bug in the way the OS handled the connect system call. The connect call is used to initiate a connection on a socket. Because of the flaw in the handling code under AIX certain versions will reboot wh...
CVE-1999-0100
Remote access in AIX innd 1.5.1, using control messages...
IBM AIX 4.2.1 - lquerypv File Read
IBM AIX 4.2.1 - lquerypv File Read source: https://www.securityfocus.com/bid/455/info There exists a vulnerability in the lquerypv command under AIX. By using the '-h' flaq, a user may read any file on the file system in hex format. /usr/sbin/lquerypv -h /pathtofilename...