854 matches found
Buffer Overrun Vulnerability in /sbin/ps on IRIX
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Buffer Overrun Vulnerability in /sbin/ps Number : 20030202-01-I Date : February 26, 2003 Reference: CVE-1999-0301 Reference: SGI BUG 696723 Fixed in : IRIX 6.5.5 or later - ----------------------- - --- Issue Specifics --- -...
CVE-2000-0077: Undefined Security Weakness
The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps and grep commands...
CVE-1999-0301
CVE-1999-0301 describes a buffer overflow in the SunOS/Solaris ps command. The connected sources confirm a local vulnerability in the ps utility that could allow a user to escalate privileges (impacting confidentiality, integrity, and availability) as indicated by the CVE record’s base metrics. T...
CVE-1999-0301
Buffer overflow in SunOS/Solaris ps command...
CVE-1999-0164
A race condition in the Solaris ps command allows an attacker to overwrite critical files...
CVE-1999-0164: Undefined Security Weakness
A race condition in the Solaris ps command allows an attacker to overwrite critical files...
CVE-1999-0388: Undefined Security Weakness
DataLynx suGuard trusts the PATH environment variable to execute the ps command, allowing local users to execute commands as root...
CVE-1999-0301: Undefined Security Weakness
Buffer overflow in SunOS/Solaris ps command...
CVE-1999-0301
Buffer overflow in SunOS/Solaris ps command...
Solaris 2.5.0/2.5.1 ps / chkey - Data Buffer
cat psexpl.po psexpl.c include include include define BUFLENGTH 632 define EXTRA 256 int mainint argc, char argv char bufBUFLENGTH + EXTRA; / ps will grok this file for the exploit code / char envp="NLSPATH=/tmp/foo",0; ulong longp; uchar charp; / This will vary depending on your libc / ulong...
Solaris 2.5.0/2.5.1 ps & chkey Data Buffer Exploit
Exploit for solaris platform in category local exploits ================================================== Solaris 2.5.0/2.5.1 ps & chkey Data Buffer Exploit ================================================== cat psexpl.po psexpl.c include include include define BUFLENGTH 632 define EXTRA 256 int...
SGI IRIX 6.5.4 / Solaris 2.5.1 - ps(1) Buffer Overflow
source: https://www.securityfocus.com/bid/220/info The ps command prints information about active processes on a system. Due to insufficient bounds checking on arguments supplied to ps, it is possible to overwrite the internal data space of the ps program. As ps is setuid root, this vulnerability...
SGI IRIX 6.5.4 Solaris 2.5.1 - ps(1) Buffer Overflow
SGI IRIX 6.5.4 Solaris 2.5.1 - ps1 Buffer Overflow source: https://www.securityfocus.com/bid/220/info The ps command prints information about active processes on a system. Due to insufficient bounds checking on arguments supplied to ps, it is possible to overwrite the internal data space of the p...