/bin/ksh creates insecure tmp files

Recently I reported that, similarly to the recently discussed tcsh vulnerability, the Bourne shell /bin/sh creates temporary files in an insecure way: http://www.securityfocus.com/templates/archive.pike?list=1&[email protected] At the time I also tested the Korn...

CVE-1999-1114

Buffer overflow in Korn Shell ksh suidexec program on IRIX 6.x and earlier, and possibly other operating systems, allows local users to gain root privileges...

SGI IRIX 6.4 - 'suid_exec' Local Privilege Escalation

source: https://www.securityfocus.com/bid/467/info A vulnerability exists in the 'suidexec' utility, as shipped by SGI with it's Irix operating system, versions 5.x and 6.x. Suidexec is part of the Korn shell package, and was originally the mechanism by which ksh executed setuid shell scripts...

SGI IRIX 6.4 - suid_exec Local Privilege Escalation

SGI IRIX 6.4 - suidexec Local Privilege Escalation source: https://www.securityfocus.com/bid/467/info A vulnerability exists in the 'suidexec' utility, as shipped by SGI with it's Irix operating system, versions 5.x and 6.x. Suidexec is part of the Korn shell package, and was originally the...

CVE-1999-1115

Vulnerability in the /etc/suidexec program in HP Apollo Domain/OS sr10.2 and sr10.3 beta, related to the Korn Shell ksh...

PT-1990-1003 · At&T +1 · Korn Shell +1

Name of the Vulnerable Software and Affected Versions: HP Apollo Domain/OS versions sr10.2 through sr10.3 beta Description: The issue is related to the /etc/suid exec program and the Korn Shell ksh in HP Apollo Domain/OS. Recommendations: For HP Apollo Domain/OS versions sr10.2 through sr10.3 bet...