SCO Unixware 7.0/7.0.1/7.1/7.1.1 - 'coredump' Symlink

source: https://www.securityfocus.com/bid/851/info Under certain versions of SCO UnixWare if a user can force a program with SGID Set Group ID to dump core they may launch a symlink attack by guessing the PID Process ID of the SGID process which they are calling. This is required because the...

SCO Unixware 7.07.0.17.17.1.1 - coredump Symlink

SCO Unixware 7.07.0.17.17.1.1 - coredump Symlink source: https://www.securityfocus.com/bid/851/info Under certain versions of SCO UnixWare if a user can force a program with SGID Set Group ID to dump core they may launch a symlink attack by guessing the PID Process ID of the SGID process which th...

[SECURITY] New version of dump released.

The version of dump that was distributed with Debian GNU/Linux 2.1 suffers from a problem with restoring symbolic links. This has been fixed in version 0.4b9-0slink1. We recommend you upgrade your dump package immediately. This version "Uses lchown instead of chown, fixing a possible security...

[SECURITY] New version of dump released.

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman December 2, 1999 - ------------------------------------------------------------------------ The version of dump that was...

CVE-1999-0075

The CVE-1999-0075 issue affects the wu-ftpd daemon, where handling of a QUOTE PASV command after a username/password can cause a core dump. This vulnerability can lead to an information disclosure (core file containing usernames and passwords) and a forced denial of service via remote triggering ...

CVE-1999-0075

PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password...

FreeBSD-SA-99.05.fts.txt

----- Forwarded message from FreeBSD Security Officer ----- Delivered-To: [email protected] Date: Wed, 15 Sep 1999 23:25:21 -0600 MDT From: FreeBSD Security Officer Subject: FreeBSD Security Advisory: FreeBSD-SA-99:05.fts Reply-To: [email protected] X-Loop: FreeBSD.org...

windows_kod.txt

Subject: ip stack bug in windows kod.ckiss of death To: [email protected] / ::: kod.c kiss of death version 1.2 ::: author kod.c bug found by klepto / [email protected] / rewritten by ignitor / ignitor@EFnet ::: stuph works on bsd/linux/nix ::: notes bluescreens windows users98/98se and kill...

BSD 2.1 FTP.Core Local Exploit

FTP.CORE attack for BSD 2.1 ----------------------------------------------------------------------------------------------------------------- by The Bronc Buster [email protected] http://www2.succeed.net/bbuster Made for The Infected www.infected.com...

irix.wu-ftpd.bof.txt

Date: Thu, 20 May 1999 15:00:00 -0700 From: Lance James To: [email protected] Subject: IRIX ftpd overflow Regarding the wu-ftpd buffer overflow, it seems vulnerable in IRIX as well. While testing it, it seemed to have core dumped and dumped the passwd file in there as well, but it's only core...

pine-bof-10000.txt

Date: Mon, 8 Feb 1999 21:19:29 +0000 From: Chris Evans To: [email protected] Subject: Pine again : Hi, PINE seems to be flavour of the month so I'll add to Michal's post. This is much less serious than Michal's problem but probably noteworthy anyway. PINE can be made to crash if /var/spool/mai...

Microsoft Windows 9598 NT Enterprise Server 4.0 SP5 NT Terminal Server 4.0 SP4 NT Workstation 4.0 SP5 - Denial of Service (2)

Microsoft Windows 9598 NT Enterprise Server 4.0 SP5 NT Terminal Server 4.0 SP4 NT Workstation 4.0 SP5 - Denial of Service 2 // source: https://www.securityfocus.com/bid/514/info The Windows 98 and Windows 2000 TCP/IP stacks were not built to reliably tolerate malformed IGMP headers. When one is...

WU-FTPD QUOTE PASV Forced Core Dump Information Disclosure

The remote FTP server fails to handle QUOTE PASV requests for logged in users. An attacker can send a specially crafted requests to cause the service to die and dump core. The core file contains the usernames and passwords of all users. C Tenable Network Security, Inc. include"compat.inc";...

CVE-1999-1210

xterm in Digital UNIX 4.0B with patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a core dump file, which is created when xterm is called with a DISPLAY environmental variable set to a display that xterm cannot access...

CVE-1999-0076

Buffer overflow in wu-ftp from PASV command causes a core dump...

PT-1997-1039 · Washington University · Wu-Ftpd

Name of the Vulnerable Software and Affected Versions: wu-ftp affected versions not specified Description: A buffer overflow issue exists in wu-ftp, triggered by the PASV command, which causes a core dump. Recommendations: At the moment, there is no information about a newer version that contains...

CVE-1999-1161

Vulnerability in ppl in HP-UX 10.x and earlier allows local users to gain root privileges by forcing ppl to core dump...

PT-1996-1052 · Hewlett Packard · Hp-Ux

Name of the Vulnerable Software and Affected Versions: HP-UX versions 10.x and earlier Description: A local privilege escalation issue exists, allowing users to gain root privileges by forcing a core dump. Recommendations: For HP-UX versions 10.x and earlier, at the moment, there is no informatio...

CVE-1999-0075

PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password...

CVE-1999-1413

Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users to overwrite or create files at higher privileges by causing a core dump, e.g. through dmesg...