Catman file clobbering vulnerability Solaris 2.x

Solaris 2.7/2.8 catman temp file vulnerability. Larry W. Cashdollar Vapid Labs Date Published: 12/18/2000 Advisory ID: 11242000-02 Risk: Low Title: catman temp file vulnerability. Class: insecure temp file handling. Remotely Exploitable: no Locally Exploitable: Yes Vulnerability Description:...

UNIX locale format string vulnerability

CORE SDI http://www.core-sdi.com UNIX locale format string vulnerability Date Published: September 4th, 2000 early release Advisory ID: CORE-090400 Bugtraq ID: 1634 CVE CAN: None currently assigned. Title: UNIX locale format string vulnerability Class: Input Validation Error Remotely Exploitable:...

SUIDPerl 5.00503 - Mail Shell Escape (1)

source: https://www.securityfocus.com/bid/1547/info The interaction between some security checks performed by suidperl, the setuid version of perl, and the /bin/mail program creates a scenario that allows local malicious users to execute commands with root privileges. The suidperl program perform...

CVE-2000-0186

The CVE-2000-0186 entry concerns a buffer overflow in the dump utility of the Linux ext2fs backup package. The underlying issue is a too-long command line argument, which can allow a local user to gain privileges. The affected component is the dump utility within the ext2fs backup toolchain; the ...

Solaris 2.5.1 - License Manager

source: https://www.securityfocus.com/bid/461/info The Solaris License Manager that ships with versions 2.5.1 and 2.6 is vulnerable to multiple symlink attacks. License Manager creates lockfiles owned by root and set mode 666 which it writes to regularily. It follows symlinks. bash$ ls -l...

PT-1996-1019 · Sendmail · Sendmail

Name of the Vulnerable Software and Affected Versions: Sendmail affected versions not specified Description: The issue allows local users to write to a file and gain group permissions via a .forward or :include: file. Recommendations: At the moment, there is no information about a newer version...

Denial of Service Vulnerabilities in Windows SMB implementation

Advisory ID Internal CORE-220618 Bugtraq ID: 5556 CVE Name: CAN-2002-0724 CERT: VU311619, VU342243, VU250635 Title: Denial of Service Vulnerabilities in Windows SMB implementation Class: Implementation flaws Remotely Exploitable: Yes Locally Exploitable: Yes Vendors contacted: - Microsoft...

RealServer memory contents disclosure vulnerability

Advisory ID Internal CORE-21116 Advisory Information: Advisory ID: CORE-20001116 Bugtraq ID: 1957 CVE Name:CVE-2000-1181 Title: RealServer memory contents disclosure vulnerability Class: Failure to handle exceptional conditions Remotely Exploitable: Yes Locally Exploitable: Yes Release Mode:...

PT-2010-5668 · Suse +1 · Suse Linux Enterprise +4

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise versions prior to the fixed version btrfs-kmp-xen versions affected versions not specified btrfs-kmp-pae versions affected versions not specified kernel-desktop-devel versions affected versions not specified Description:...

PT-2010-5674 · Gnu +1 · Glibc +1

Name of the Vulnerable Software and Affected Versions: glibc versions prior to 2.11.2-r3 glibc versions prior to 2.15-r3 glibc-dceext-32bit affected versions not specified glibc-64bit affected versions not specified glibc-profile-64bit affected versions not specified glibc-obsolete affected...

PT-2010-5692 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise affected versions not specified Linux kernel versions prior to 2.6.36-rc5-next-20100929 Description: The issue involves multiple vulnerabilities in the Linux kernel that can lead to a denial of service or potentially oth...

PT-2011-5208 · Systemtap +7 · Systemtap-Debuginfo +21

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.8.4 systemtap-runtime-debuginfo affected versions not specified systemtap-sdt-devel affected versions not specified systemtap affected versions not specified libvmtools0 affected versions not specified...

PT-2002-3156

Name of the Vulnerable Software and Affected Versions Red Hat Linux kernel versions 2.2.24 through 2.4.18 Red Hat Linux kernel-enterprise versions 2.2.24 Red Hat Linux kernel-smp versions 2.2.24 through 2.4.18 Red Hat Linux kernel-iseries version 2.4.18 Red Hat Linux pcmcia-modules version...

PT-2011-5229 · Opensuse +5 · Opensuse +5

Name of the Vulnerable Software and Affected Versions: openSUSE systemtap-runtime-debuginfo affected versions not specified openSUSE systemtap-sdt-devel affected versions not specified openSUSE systemtap affected versions not specified openSUSE libvmtools0 affected versions not specified openSUSE...