CVE-2003-1073

A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with .. dot dot sequences in the job name, then modifying the directory structure after at checks permissions to delete the file and before the deletion actually takes pla...

Sun Microsystems Solaris at -r job name handling and race condition vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Synopsis: at -r job name handling and race condition vulnerabilities Product: Sun Microsystems Solaris Version: all URL: http://isec.pl/vulnerabilities/isec-0008-sun-at.txt Author: Wojciech Purczynski [email protected] Date: November 1, 2002 Update: Janua...

Sun Solaris 2.5/2.6/7.0/8/9 AT Command - Arbitrary File Deletion

source: https://www.securityfocus.com/bid/6692//info The at utility shipped with Sun Solaris may be prone to an issue which may allow attackers to delete arbitrary files on the system. The vulnerability occurs when using at with the '-r' option. This option is used to remove previously scheduled ...

Sun Solaris 2.52.67.089 AT Command - Arbitrary File Deletion

Sun Solaris 2.52.67.089 AT Command - Arbitrary File Deletion source: https://www.securityfocus.com/bid/6692//info The at utility shipped with Sun Solaris may be prone to an issue which may allow attackers to delete arbitrary files on the system. The vulnerability occurs when using at with the '-r...

isec-0008-sun-at.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Synopsis: at -r job name handling and race condition vulnerabilities Product: Sun Microsystems Solaris Version: all URL: http://isec.pl/vulnerabilities/isec-0008-sun-at.txt Author: Wojciech Purczynski Date: November 1, 2002 Update: January 27, 2003...

CVE-2002-1614

Buffer overflow in HP Tru64 UNIX allows local users to execute arbitrary code via a long argument to /usr/bin/at...

Переполнение буфера в at под linux (buffer overflow)

Переполнение кучи...

AT 3.1.8 - Formatted Time Heap Overflow

AT 3.1.8 - Formatted Time Heap Overflow source: https://www.securityfocus.com/bid/3886/info at is a freely available, open source scheduler package. It is included with various Unix and Linux operating systems, and maintained by public domain. Under some circumstances, at does not correctly handl...

AT 3.1.8 - Formatted Time Heap Overflow

source: https://www.securityfocus.com/bid/3886/info at is a freely available, open source scheduler package. It is included with various Unix and Linux operating systems, and maintained by public domain. Under some circumstances, at does not correctly handle time input. A local user attempting to...

Ошибка форматной строки в at из Solaris (NLS format string)

Ошибка форматной строки при работе с NLS...

"at" is vulnerable on Solaris 7 and 8

We found that "at" in Solaris is vulnerable on Solaris 7 and 8 The kind of bug is discussed on Bugtraqid:1634 -- Generally a program that needs to display a message to the user will obtain the proper language specific string from the database using the original message as the search key and...

irixat.txt

Date: Fri, 3 Jul 1998 22:14:14 +0200 From: "J.A. Gutierrez" Subject: more about 'at' I've tried the trick from NetBSD Security Advisory 1998-004 on an IRIX 6.2 host, and it seems it works too. $ at -f /etc/shadow now + 1 minute - shadow is mailed to user: 'at' is: f 23947 91...

NetBSD 1.3.2 / SGI IRIX 6.5.1 - 'at(1)' Read File

source: https://www.securityfocus.com/bid/331/info A vulnerability exists in NetBSD version 1.3.2 and lower, and Silicon Graphics Inc's IRIX versions 6.2, 6.3, 6.4, 6.5 and 6.5.1. The at1 program can be supplied with a -f flag, and an error is access validation can result in the mailing of portio...