Digital Unix 4.0 - MSGCHK Buffer Overflow

Digital Unix 4.0 - MSGCHK Buffer Overflow // source: https://www.securityfocus.com/bid/3311/info The msgchk utility under certain versions of Digital Unix contains a buffer overflow vulnerability which could yield root privilege. If a local user invokes the msgchk utility at the command line,...

Digital Unix 4.0 - MSGCHK Buffer Overflow

// source: https://www.securityfocus.com/bid/3311/info The msgchk utility under certain versions of Digital Unix contains a buffer overflow vulnerability which could yield root privilege. If a local user invokes the msgchk utility at the command line, argumented with a sufficiently long string of...

Oracle 8.1.5 dbnsmp vulnerability

Title: Vulnerability in dbsnmp in Oracle 8.1.5 Date: 01-08-2001 Platform: Only tested in Digital Unix. Impact: Any user can gain root privileges Author: Ismael Briones Vilar [email protected] Status: Vendor Contacted, and they are investigating a fix . PROBLEM SUMMARY: There is a problem in...

CVE-2000-0845

kdebug daemon kdebugd in Digital Unix 4.0F allows remote attackers to read arbitrary files by specifying the full file name in the initialization packet...

CVE-2000-0845

kdebug daemon kdebugd in Digital Unix 4.0F allows remote attackers to read arbitrary files by specifying the full file name in the initialization packet...

CVE-2000-0845

CVE-2000-0845 affects Digital Unix 4.0F: the kdebugd daemon allows remote attackers to read arbitrary files by specifying the full path in the initialization packet. Exploitation status and remediation details are not provided in the supplied documents.

CVE-2000-0845: Undefined Security Weakness

kdebug daemon kdebugd in Digital Unix 4.0F allows remote attackers to read arbitrary files by specifying the full file name in the initialization packet...

CVE-1999-0358

Digital Unix 4.0 has a buffer overflow in the inc program of the mh package...

CVE-1999-0358

Summary: CVE-1999-0358 affects Digital Unix 4.0 with a buffer overflow in the inc program of the mh package. The connected documents (e.g., Red Hat CVE entry and related records) reiterate the same description without providing concrete exploit details, affected version ranges beyond Digital Unix...

CVE-1999-0358: Undefined Security Weakness

Digital Unix 4.0 has a buffer overflow in the inc program of the mh package...

[ENIGMA] Digital UNIX/Tru64 UNIX remote kdebug Vulnerability

ENIGMA SECURITY ADVISORY A division of ITAC: Leaders in IT Security http://enigma.itaudit.com.au Digital UNIX kdebugd remote Vulnerability Title: kdebugd service file vulnerability Bug ID: EN18090001 Affected: Digital UNIX 4.0F, other versions believed to be as well but untested. Compromise: Any...

CVE-1999-0406

CVE-1999-0406 affects the Digital Unix Networker component nsralist, where a buffer overflow could allow local users to obtain root privileges. The description across connected sources consistently states a local-privilege-elevation impact from this buffer overflow, but the documented details do ...

CVE-1999-0406

Digital Unix Networker program nsralist has a buffer overflow which allows local users to obtain root privilege...

CVE-1999-0406: Undefined Security Weakness

Digital Unix Networker program nsralist has a buffer overflow which allows local users to obtain root privilege...

dtaction.digital.unix.vuln.txt

Zack Hubert [email protected] Sent: Thursday, September 16, 1999 12:39 PM Subject: Vulnerability in dtaction on Digital Unix I have verified that the dtaction vulnerability in CDE can be exploited for local root compromise on Digital Unix systems. Background -------------- This is a followup to th...

DIGITAL UNIX 4.0 d/e/f / AIX 4.3.2 / CDE 2.1 / IRIX 6.5.14 / Solaris 7.0 - Local Buffer Overflow

/ source: https://www.securityfocus.com/bid/635/info TRU64/DIGITAL UNIX 4.0 d/e/f,AIX include include include define BUFLEN 998 char exploitcode = "\xeb\x18\x5e\x33\xc0\x33\xdb\xb3\x08\x2b\xf3\x88\x06\x50\x50\xb0" "\x8d\x9a\xff\xff\xff\xff\x07\xee\xeb\x05\xe8\xe3\xff\xff\xff"...

DIGITAL UNIX 4.0 d/f / AIX 4.3.2 / CDE 2.1 / IRIX 6.5.14 / Solaris 7.0 / SunOS 4.1.4 - Local Buffer Overflow

/ source: https://www.securityfocus.com/bid/641/info TRU64/DIGITAL UNIX 4.0 d/f,AIX Somehow the overflow is very sensitive to caching of the stack. To see that it really does work, run it in a debugger and set a break point in ttopen when that is reached, set a breakpoint in sscanf and continue...

DIGITAL UNIX 4.0 def AIX 4.3.2 CDE 2.1 IRIX 6.5.14 Solaris 7.0 - Local Buffer Overflow

DIGITAL UNIX 4.0 def AIX 4.3.2 CDE 2.1 IRIX 6.5.14 Solaris 7.0 - Local Buffer Overflow / source: https://www.securityfocus.com/bid/635/info TRU64/DIGITAL UNIX 4.0 d/e/f,AIX include include include define BUFLEN 998 char exploitcode =...

du.4.0e.var.perms.txt

Date: Sun, 4 Apr 1999 20:31:12 +0300 From: Harhalakis Stefanos To: [email protected] Subject: Digital Unix 4.0E /var permission On Digital Unix 4.0E with the latest patch kit aplied, after a new installation /var has g+w for group system. Anyone that can crack any account with gid==system may...

altavista.firewall97.txt

Date: Thu, 25 Feb 1999 12:57:20 +0100 From: Jochen Thomas Bauer To: [email protected] Subject: AltaVista Firewall97 Hello everyone, Before I begin I want to make one thing clear: I told AltaVista about this problem about 4 weeks ago. The next day I got a reply saying that my message had been...