74 matches found
digital.unix.dtlogin.txt
Date: Fri, 11 Jun 1999 11:11:10 -0700 PDT From: CIAC Mail User To: [email protected] Subject: CIAC Bulletin J-044: Tru64/Digital UNIX dtlogin Security Vulnerability For Public Release -----BEGIN PGP SIGNED MESSAGE----- The U.S. Department of Energy Computer Incident Advisory Capabili...
digital-unix-4.0-bof.txt
Date: Mon, 25 Jan 1999 12:21:45 -0800 From: Lamont Granquist To: [email protected] Subject: Digital Unix 4.0 exploitable buffer overflows Previously Digital Unix has been relatively immune to buffer overflow attacks due to the lack of an executable stack in the 3.x versions. For the 4.0 versio...
digital-unix4.0-asm-shell.txt
Date: Tue, 26 Jan 1999 15:18:08 -0500 From: Seth Michael McGann To: [email protected] Subject: Re: Digital Unix 4.0 exploitable buffer overflows On Mon, 25 Jan 1999, Lamont Granquist wrote: Previously Digital Unix has been relatively immune to buffer overflow attacks due to the lack of an...
digital.unix.bofs.txt
Date: Fri, 19 Feb 1999 14:18:18 -0800 From: Lamont Granquist To: [email protected] Subject: More Buffer Overflows in Digital Unix 1. No return-into-libc exploit for Digital Unix I didn't understand the return-into-libc method really prior to my previous BUGTRAQ post. Since then, I understand i...
CVE-1999-0406
Digital Unix Networker program nsralist has a buffer overflow which allows local users to obtain root privilege...
PT-1999-1091 · Digital · Digital Unix
Name of the Vulnerable Software and Affected Versions: Digital Unix affected versions not specified Description: The issue is related to a buffer overflow in the Digital Unix Networker program nsralist, which allows local users to obtain root privilege. Recommendations: At the moment, there is no...
CVE-1999-0358
Digital Unix 4.0 has a buffer overflow in the inc program of the mh package...
CVE-1999-1458
Buffer overflow in at program in Digital UNIX 4.0 allows local users to gain root privileges via a long command line argument...
CVE-1999-1044
Vulnerability in Advanced File System Utility advfs in Digital UNIX 4.0 through 4.0d allows local users to gain privileges...
Digital UNIX 4.04.0 B4.0 D - SUIDSGID Core File
Digital UNIX 4.04.0 B4.0 D - SUIDSGID Core File source: https://www.securityfocus.com/bid/74/info Digital UNIX 4.0 will follow symlinks while writting core files if two setuid programs dump core in sucession. The core file is owned by root but with the user's groud id. The core file permissions a...
Digital UNIX 4.0/4.0 B/4.0 D - SUID/SGID Core File
source: https://www.securityfocus.com/bid/74/info Digital UNIX 4.0 will follow symlinks while writting core files if two setuid programs dump core in sucession. The core file is owned by root but with the user's groud id. The core file permissions are 0600. This can be used to create root owned...
CVE-1999-1210
xterm in Digital UNIX 4.0B with patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a core dump file, which is created when xterm is called with a DISPLAY environmental variable set to a display that xterm cannot access...
BSD/OS 2.1 / DG/UX 4.0 / Debian 0.93 / Digital UNIX 4.0 B / FreeBSD 2.1.5 / HP-UX 10.34 / IBM AIX 4.1.5 / NetBSD 1.0/1.1 / NeXTstep 4.0 / SGI IRIX 6.3 / SunOS 4.1.4 - 'rlogin' Local Privilege Escalation
/ source: https://www.securityfocus.com/bid/242/info The SUID rlogin program is used to establish remote sessions. A buffer overflow condition has been found in the rlogin program that may allow an unauthorized user to gain root access. The overflow in particular is in the rlogin code that handle...