Sendmail < 8.7.6 GECOS Field Local Overflow DoS

Binary data 2044.prm...

CVE-1999-1140

Buffer overflow in CrackLib 2.5 may allow local users to gain root privileges via a long GECOS field...

CVE-1999-1140

CrackLib 2.5 is vulnerable to a local privilege escalation via a buffer overflow caused by a long GECOS field, enabling root privileges. The CVE-1999-1140 entry cites a local attack vector with high impact (C/C/I/A) and a base score of 7.2. No explicit remediation or exploit details are provided ...

CVE-1999-1140: Undefined Security Weakness

Buffer overflow in CrackLib 2.5 may allow local users to gain root privileges via a long GECOS field...

CVE-1999-1471

CVE-1999-1471 affects BSD-based operating systems’ passwd component (versions 4.3 and earlier). The root cause is a buffer overflow when a long shell or GECOS field is supplied, enabling local users to gain root privileges. Connected documents confirm the vulnerability is local and provide no pub...

CVE-1999-0708

CVE-1999-0708 describes a local buffer overflow in cfingerd's GECOS field that allows a local user to gain root privileges. The vulnerability affects cfingerd prior to version 1.4.4 (as reflected in multiple scanners and advisories), with the overflow enabling privilege escalation without requiri...

CVE-1999-0708: Undefined Security Weakness

Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field...

CVE-1999-0901

CVE-1999-0901 affects the ypserv component (noted as ypserv 4.1-4 in some feeds). The description across Red Hat and CVE records states that a local user can modify the GECOS field and login shells of other users, indicating an unauthorized local privilege impact. The Red Hat/Red Hat-linked entri...

CVE-1999-0901

ypserv allows a local user to modify the GECOS and login shells of other users...

CVE-1999-0901: Undefined Security Weakness

ypserv allows a local user to modify the GECOS and login shells of other users...

[SECURITY] New version of nis released

The nis package that was distributed with Debian GNU/Linux 2.1 has a couple of problems: ypserv allowed any machine in the NIS domain to insert new tables rpc.yppasswd had a bufferoverflow in its MD5 code rpc.yppasswd allowed users to change the GECOS and loginshell entries of other users This ha...

CVE-1999-0901

ypserv allows a local user to modify the GECOS and login shells of other users...

AZL-7455 CVE-1999-0901 affecting package ypserv 4.1-4

ypserv allows a local user to modify the GECOS and login shells of other users...

AZL-37065 CVE-1999-0901 affecting package ypserv 4.2-12

ypserv allows a local user to modify the GECOS and login shells of other users...

PT-1999-1447 · Ypserv · Ypserv

Name of the Vulnerable Software and Affected Versions: ypserv affected versions not specified Description: The issue allows a local user to modify the GECOS and login shells of other users. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

CVE-1999-0131: Undefined Security Weakness

Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users...

Martin Schulze Cfingerd 1.4.2 - GECOS Buffer Overflow

Martin Schulze Cfingerd 1.4.2 - GECOS Buffer Overflow // source: https://www.securityfocus.com/bid/651/info Under systems that allow the user to change his GECOS field from the password file and do not limit its length cfingerd is vulnerable to a local root or nobody buffer overflow. By setting a...

Martin Schulze Cfingerd 1.4.2 - GECOS Buffer Overflow

// source: https://www.securityfocus.com/bid/651/info Under systems that allow the user to change his GECOS field from the password file and do not limit its length cfingerd is vulnerable to a local root or nobody buffer overflow. By setting a carefully designed GECOS field it is possible to...

CVE-1999-1471

Buffer overflow in passwd in BSD based operating systems 4.3 and earlier allows local users to gain root privileges by specifying a long shell or GECOS field...

PT-1989-1002 · Bsd · Bsd

Name of the Vulnerable Software and Affected Versions: BSD based operating systems versions 4.3 and earlier Description: A buffer overflow issue in the passwd component of BSD based operating systems allows local users to gain root privileges. This is achieved by specifying a long shell or GECOS...