ClearCase db_loader TERM environment variable buffer overflow vulnerability

--------------------------------------------------------------------------- ClearCase dbloader TERM environment variable buffer overflow vulnerability --------------------------------------------------------------------------- Release infomation ------------------ Found Date: 2001-10-02 Release...

Rational ClearCase 3.24.x - DB Loader TERM Environment Variable Buffer Overflow

Rational ClearCase 3.24.x - DB Loader TERM Environment Variable Buffer Overflow // source: https://www.securityfocus.com/bid/3523/info ClearCase is a commercially available software change management package. It is maintained and distributed by Rational. A problem with the package could lead to a...

Rational ClearCase 3.2/4.x - DB Loader TERM Environment Variable Buffer Overflow

// source: https://www.securityfocus.com/bid/3523/info ClearCase is a commercially available software change management package. It is maintained and distributed by Rational. A problem with the package could lead to a local user gaining elevated privileges. The problem is in the handling of...

Переполнение буфера в ClearCase db_loader (buffer overflow)

Переполнение буфера при длинной переменной окружения TERM...

CVE-1999-0350

Race condition in the dbloader program in ClearCase gives local users root access by setting SUID bits...

CVE-1999-0350

The vulnerability CVE-1999-0350 affects ClearCase’s db_loader, where a race condition can allow local users to obtain root privileges by setting SUID bits. The Red Hat and CVE records confirm the issue and describe the root cause as a race in the db_loader program; exploitation details or specifi...

CVE-1999-0350: Undefined Security Weakness

Race condition in the dbloader program in ClearCase gives local users root access by setting SUID bits...

ClearCase.txt

L0pht Security Advisory Advisory released Jan 8 1999 Application: Rational Software's Clear Case v3.2 Severity: any local user can become root Author: [email protected] http://www.L0pht.com/advisories.html --- Overview : --- ClearCase is a configuration management program from Rational Software...

clearcase2.txt

Date: Tue, 9 Feb 1999 17:57:27 +0100 From: Oezguer Kesim To: [email protected] Subject: Re: L0pht Advisory - Rational Software ClearCase root exploitable race conditions Holla, things are even worse! You may want to remove the setuid flag from /usr/atria/etc/dbloader, but this won't fix the...

Rational Software ClearCase for Unix 3.2 - ClearCase SUID

Rational Software ClearCase for Unix 3.2 - ClearCase SUID source: https://www.securityfocus.com/bid/538/info Rational Software's ClearCase product includes a vulnerability whereby an unprivileged user can have any readable executable set to SUID root.. A 1.5 meg file is copied and then chmod'ed t...

Rational Software ClearCase for Unix 3.2 - ClearCase SUID

source: https://www.securityfocus.com/bid/538/info Rational Software's ClearCase product includes a vulnerability whereby an unprivileged user can have any readable executable set to SUID root.. A 1.5 meg file is copied and then chmod'ed to SUID, and during the time this file is being copied it c...

CVE-1999-0350

Race condition in the dbloader program in ClearCase gives local users root access by setting SUID bits...

PT-1999-1039 · Ibm · Clearcase

Name of the Vulnerable Software and Affected Versions: ClearCase affected versions not specified Description: A race condition exists in the db loader program of ClearCase, allowing local users to gain root access by setting SUID bits. Recommendations: At the moment, there is no information about...