Solaris 2.6/7.0 - 'lpset -r' Local Buffer Overflow (3)

/ source: https://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. However, when supplied a well crafted buffer containing...

CVE-1999-0163

In older versions of Sendmail, an attacker could use a pipe character to execute root commands...

CVE-1999-0003

Execute commands as root via buffer overflow in Tooltalk database server rpc.ttdbserverd...

CVE-1999-0038

CVE-1999-0038 describes a buffer overflow in the xlock program that allows local users to execute commands as root. The connected sources (Red Hat CVE entry, PT Security listing, and multiple feeds) corroborate a local-privilege escalation due to a buffer overflow in xlock, but the documents do n...

CVE-1999-0003

CVE-1999-0003: A buffer overflow in the ToolTalk database server (rpc.ttdbserverd) may allow an attacker to execute arbitrary commands as root. Affected component is ToolTalk’s object database server; exploitation would require access to the vulnerable service. In the provided references, the imp...

CVE-1999-0003

Execute commands as root via buffer overflow in Tooltalk database server rpc.ttdbserverd...

SGI IRIX 6.2 - 'day5notifier' Local Privilege Escalation

!/bin/sh source: https://www.securityfocus.com/bid/345/info A vulnerability exists in the day5notifier program, shipped with Irix 6.2 from Silicon Graphics Inc. This program will allow any user to run any command as root. day5notifier wisely replaces a number of system calls with execve calls...

CVE-1999-0163

In older versions of Sendmail, an attacker could use a pipe character to execute root commands...

AZL-7358 CVE-1999-0163 affecting package sendmail 8.15.2-46

In older versions of Sendmail, an attacker could use a pipe character to execute root commands...

PT-1997-1095 · Sendmail · Sendmail

Name of the Vulnerable Software and Affected Versions: Sendmail version 8.6.9 Description: The issue allows remote attackers to execute root commands using ident. Recommendations: For Sendmail version 8.6.9, update to a newer version that contains a fix for this issue...