CVE-2001-1096

CVE-2001-1096 refers to buffer overflows in muxatmd on AIX 4. The vulnerability arises from a buffer overflow condition in muxatmd, which could cause a core dump and potentially allow code execution. The security notes indicate the vulnerability is associated with AIX 4, but no explicit exploit d...

MediaMail vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: MediaMail vulnerability Number: 20020602-01-I Date: June 6, 2002 Reference: CAN-2002-0358 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that the "MediaMail" and "MediaMail Pro" the...

QNX

Shouts Zen-parse, lockdown, sloth, ^ChAoS, elfan, Albert E., S. Hawking, Ali G, Jenna Jameson flur, FreeBSD Security Officers, the guy that used to clean our desks every morning and still cleans jaguars desk., QNX developers, Jon Lasser col/67, merlions girlfriend, ourselves and Jenna again. Issu...

TRU64 /bin/chsh overflow

oops forgot one ... more soon. = /bin/chsh perl -e 'print "A" x 9000' Segmentation fault uname -a OSF1 alpha.snosoft.com V5.1 732 alpha ls -al /bin/chsh -rws--x--x 3 root bin 32944 Aug 24 2000 /bin/chsh dbx ./chsh core dbx version 5.1 Type 'help' for help. Core file created by program "chsh"...

CVE-2002-0041

Unknown vulnerability in Mail for SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, when running with the -R option, allows local and remote attackers to cause a core dump...

CVE-2002-0041

Unknown vulnerability in Mail for SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, when running with the -R option, allows local and remote attackers to cause a core dump...

Cleartext passphrase in PGP7 + Outlook

Passphrase is stored in memory in cleartext and presents in memory dump...

CVE-2002-0040

Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES environment variable, which might allow the users to gain privileges...

CVE-2002-0104

AFTPD 5.4.4 allows remote attackers to gain sensitive information via a CD CWD tilde command, which causes a core dump...

CVE-2002-0104

AFTPD 5.4.4 allows remote attackers to gain sensitive information via a CD CWD tilde command, which causes a core dump...

CVE-2002-0104

CVE-2002-0104 affects AFTPD 5.4.4. A remote attacker can trigger a CD (CWD) ~ (tilde) command that causes a core dump, which may lead to partial disclosure of sensitive information. The connected documents do not provide a published fix or remediation details.

CVE-1999-1161

Vulnerability in ppl in HP-UX 10.x and earlier allows local users to gain root privileges by forcing ppl to core dump...

CVE-1999-1161

CVE-1999-1161 describes a local privilege-escalation vulnerability in HP-UX 10.x and earlier where forcing the ppl process to core-dump allows a local user to gain root privileges. Affected software: HP-UX kernel/userland component handling ppl (HP-UX 10.x and earlier). Root cause: improper handl...

CVE-2001-0373

The default configuration of the Dr. Watson program in Windows NT and Windows 2000 generates user.dmp crash dump files with world-readable permissions, which could allow a local user to gain access to sensitive information...

CVE-1999-1024

ipprint procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a zero length header, which causes an infinite loop and core dump when tcpdump prints the packet...

CVE-2001-1096

Buffer overflows in muxatmd in AIX 4 allows an attacker to cause a core dump and possibly execute code...

CVE-1999-1210

xterm in Digital UNIX 4.0B with patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a core dump file, which is created when xterm is called with a DISPLAY environmental variable set to a display that xterm cannot access...

CVE-1999-1224

IMAP 4.1 BETA, and possibly other versions, does not properly handle the SIGABRT abort signal, which allows local users to crash the server imapd via certain sequences of commands, which causes a core dump that may contain sensitive password information...

CVE-1999-1413

Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users to overwrite or create files at higher privileges by causing a core dump, e.g. through dmesg...

CVE-1999-1445

Vulnerability in imapd and ipop3d in Slackware 3.4 and 3.3 with shadowing enabled, and possibly other operating systems, allows remote attackers to cause a core dump via a short sequence of USER and PASS commands that do not provide valid usernames or passwords...