[SECURITY] Fedora 21 Update: bash-4.3.22-3.fc21

The GNU Bourne Again shell Bash is a shell or command language interpreter that is compatible with the Bourne shell sh. Bash incorporates useful features from the Korn shell ksh and the C shell csh. Most sh scripts can be run by bash without modification...

[SECURITY] Fedora 19 Update: bash-4.2.47-2.fc19

The GNU Bourne Again shell Bash is a shell or command language interpreter that is compatible with the Bourne shell sh. Bash incorporates useful features from the Korn shell ksh and the C shell csh. Most sh scripts can be run by bash without modification...

FreeBSD Ports: mksh

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-1845

The Korn shell aka mksh before R33d on MirOS aka MirBSD does not flush the tty's I/O when invoking mksh in a new terminal, which allows local users to gain privileges by opening a virtual terminal and entering command sequences, which might later be executed in opportunistic circumstances by a...

CVE-2008-1845

The Korn shell aka mksh before R33d on MirOS aka MirBSD does not flush the tty's I/O when invoking mksh in a new terminal, which allows local users to gain privileges by opening a virtual terminal and entering command sequences, which might later be executed in opportunistic circumstances by a...

CVE-2008-1845

The Korn shell aka mksh before R33d on MirOS aka MirBSD does not flush the tty's I/O when invoking mksh in a new terminal, which allows local users to gain privileges by opening a virtual terminal and entering command sequences, which might later be executed in opportunistic circumstances by a...

DEBIAN-CVE-2008-1845

The Korn shell aka mksh before R33d on MirOS aka MirBSD does not flush the tty's I/O when invoking mksh in a new terminal, which allows local users to gain privileges by opening a virtual terminal and entering command sequences, which might later be executed in opportunistic circumstances by a...

Design/Logic Flaw

The Korn shell aka mksh before R33d on MirOS aka MirBSD does not flush the tty's I/O when invoking mksh in a new terminal, which allows local users to gain privileges by opening a virtual terminal and entering command sequences, which might later be executed in opportunistic circumstances by a...

CVE-2008-1845

The Korn shell aka mksh before R33d on MirOS aka MirBSD does not flush the tty's I/O when invoking mksh in a new terminal, which allows local users to gain privileges by opening a virtual terminal and entering command sequences, which might later be executed in opportunistic circumstances by a...

CVE-2008-1845

The vulnerability CVE-2008-1845 affects mksh (Korn shell) on MirOS/MirBSD prior to R33d. The issue is that mksh does not flush the tty I/O when invoked in a new terminal, allowing a local user to gain privileges by opening a virtual terminal and later having command sequences executed when anothe...

CVE-2008-1845

The Korn shell aka mksh before R33d on MirOS aka MirBSD does not flush the tty's I/O when invoking mksh in a new terminal, which allows local users to gain privileges by opening a virtual terminal and entering command sequences, which might later be executed in opportunistic circumstances by a...

MirOS BSD Korn Shell本地权限提升漏洞

BUGTRAQ ID: 28768 MirOS BSD是运行在32位i386和sparc平台上的BSD家族操作系统。 MirBSD的Korn Shell（mksh）在通过-T命令行开关附加到TTY时存在错误，本地攻击者可以利用之前写入到所附加虚拟控制台的字符以运行mksh用户的权限执行任意命令。 MirOS Project MirBSD Korn Shell R33d MirOS Project ------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mirbsd.org...

CVE-1999-1115

Vulnerability in the /etc/suidexec program in HP Apollo Domain/OS sr10.2 and sr10.3 beta, related to the Korn Shell ksh...

CVE-1999-1114

Buffer overflow in Korn Shell ksh suidexec program on IRIX 6.x and earlier, and possibly other operating systems, allows local users to gain root privileges...

CVE-1999-1114

CVE-1999-1114 concerns a buffer overflow in the Korn Shell (ksh) suid_exec program on IRIX 6.x and earlier (and possibly other OSes), enabling local users to gain root privileges. The vulnerability arises in the suid_exec component and has been documented in multiple sources (NVD, CVE, CVE List)....

CVE-1999-1115

The Connected PT Security entry PT-1990-1003 identifies this CVE as affecting HP Apollo Domain/OS versions sr10.2 through sr10.3 beta, tied to the /etc/suid_exec program and the Korn Shell (ksh). The description does not provide exact root cause details beyond the association with the /etc/suid_e...

/bin/ksh creates insecure tmp files

Recently I reported that, similarly to the recently discussed tcsh vulnerability, the Bourne shell /bin/sh creates temporary files in an insecure way: http://www.securityfocus.com/templates/archive.pike?list=1&[email protected] At the time I also tested the Korn...

CVE-1999-1114

Buffer overflow in Korn Shell ksh suidexec program on IRIX 6.x and earlier, and possibly other operating systems, allows local users to gain root privileges...

SGI IRIX 6.4 - 'suid_exec' Local Privilege Escalation

source: https://www.securityfocus.com/bid/467/info A vulnerability exists in the 'suidexec' utility, as shipped by SGI with it's Irix operating system, versions 5.x and 6.x. Suidexec is part of the Korn shell package, and was originally the mechanism by which ksh executed setuid shell scripts...

SGI IRIX 6.4 - suid_exec Local Privilege Escalation

SGI IRIX 6.4 - suidexec Local Privilege Escalation source: https://www.securityfocus.com/bid/467/info A vulnerability exists in the 'suidexec' utility, as shipped by SGI with it's Irix operating system, versions 5.x and 6.x. Suidexec is part of the Korn shell package, and was originally the...