74 matches found
CVE-2001-1092
CVE-2001-1092 concerns msgchk in Digital UNIX 4.0G and earlier that allows a local user to read the first line of arbitrary files by a symlink attack on the user’s .mh_profile. The root cause is msgchk reads the profile to obtain configuration options, and if linked to a target file readable by t...
CVE-2001-1092: Undefined Security Weakness
msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink attack on the .mhprofile file...
CVE-2001-1093: Undefined Security Weakness
Buffer overflow in msgchk in Digital UNIX 4.0G and earlier allows local users to execute arbitrary code via a long command line argument...
CVE-1999-1044
The CVE-1999-1044 entry concerns the Advanced File System Utility (advfs) in Digital UNIX, affecting versions 4.0 through 4.0d. The vulnerability enables local users to gain privileges, but the provided documents do not disclose the exact root cause, vulnerable function/file, or affected componen...
CVE-1999-1044
Vulnerability in Advanced File System Utility advfs in Digital UNIX 4.0 through 4.0d allows local users to gain privileges...
CVE-1999-1044: Undefined Security Weakness
Vulnerability in Advanced File System Utility advfs in Digital UNIX 4.0 through 4.0d allows local users to gain privileges...
Tru64 - Malformed TCP Packet Denial of Service
Tru64 - Malformed TCP Packet Denial of Service source: https://www.securityfocus.com/bid/4011/info It has been reported that Tru64 systems may be prone to a denial of service condition when handling malformed TCP packets. Specifically, when processing a malformed TCP packet with both the SYN and...
Tru64 - Malformed TCP Packet Denial of Service
source: https://www.securityfocus.com/bid/4011/info It has been reported that Tru64 systems may be prone to a denial of service condition when handling malformed TCP packets. Specifically, when processing a malformed TCP packet with both the SYN and FIN flags set, vulnerable Tru64 systems may blo...
CVE-1999-1221
The CVE-1999-1221 vulnerability affects Digital Unix (OSF/1) 3.x, where local users can modify arbitrary files via a symlink attack on the dxchpwd.log file. The provided documents describe the affected product and the underlying cause as a symlink attack, but do not include details on exploitatio...
CVE-1999-1210
xterm in Digital UNIX 4.0B with patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a core dump file, which is created when xterm is called with a DISPLAY environmental variable set to a display that xterm cannot access...
CVE-1999-1221
dxchpwd in Digital Unix OSF/1 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.log file...
CVE-1999-1458
Buffer overflow in at program in Digital UNIX 4.0 allows local users to gain root privileges via a long command line argument...
CVE-1999-1458
The vulnerability CVE-1999-1458 is a buffer overflow in the at program of Digital UNIX 4.0 that allows local users to gain root privileges via a long command line argument. Documented impact: local privilege escalation with complete confidentiality, integrity, and availability impact. The provide...
CVE-1999-1210
Affected software: xterm on Digital UNIX 4.0B with patch kit 5. The vulnerability arises from a symlink attack on a core-dump file created when xterm is invoked with DISPLAY set to an inaccessible display. Local attackers can use this to overwrite arbitrary files. The description does not provide...
CVE-1999-1210: Undefined Security Weakness
xterm in Digital UNIX 4.0B with patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a core dump file, which is created when xterm is called with a DISPLAY environmental variable set to a display that xterm cannot access...
CVE-1999-1221: Undefined Security Weakness
dxchpwd in Digital Unix OSF/1 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.log file...
CVE-1999-1458: Undefined Security Weakness
Buffer overflow in at program in Digital UNIX 4.0 allows local users to gain root privileges via a long command line argument...
Digital Unix 4.0x msgchk multiple vulnerabilities
hi everyone. there were multiple vulnerabilities in "/usr/bin/mh/msgchk" on digital unix 4.0x it's a mail utility - check for messages only available within the message handlin system, mh two vulnerabilities were found. /usr/bin/mh/msgchk is affected to buffer overflow vulnerability -- snip -- $...
