CVE-1999-1039

Vulnerability in 1 diskalign and 2 diskperf in IRIX 6.4 patches 2291 and 2848 allow a local user to create root-owned files leading to a root compromise...

Multiple vendor 'Taylor UUCP' problems.

Brief description Due to incorrect argument handling in a component of the Taylor UUCP package, it is possible for local users to gain uid/gid uucp. This may allow further elevation, depending on the system, up to and including root access. On OpenBSD 2.8 and probably others it allows root...

SuSE Security Announcement: screen (SuSE-SA:2001:030)

-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: screen Announcement-ID: SuSE-SA:2001:030 Date: Wednesday, September 5 2001 18:00 MEST Affected SuSE versions: 6.0, 6.1, 6.2 6.3, 6.4, 7.0, 7.1, 7.2 Vulnerability Type: local root compromise Severity 1-10: 5 SuSE default packag...

Linux dump uses environment variables insecurely, allowing for root compromise

Overview Some implementations of the Linux backup utility, dump, call external programs on remote machines via the RSH environment variable. This may permit an attacker to compromise root if dump is setuid root. Description Some implementations of the Linux backup utility, dump, permit use of...

Red Hat linux restore uses insecure environment variables allowing root compromise

Overview Some implementations of the Linux restoration utility, restore, call external programs on remote machines via the RSH environment variable. This may permit an attacker to compromise root if restore is setuid root. Description Some implementations of the Linux restoration utility, restore...

Arkeia Possible remote root & information leakage

Arkeia 4.2 - other versions not tested Possible remote root & information leakage Sumary Arkeia www.arkeia.com is from their webpage: "Arkeia simplifies data protection by providing automated backup and recovery.The system supports a wide variety of computers, operating systems and storage device...

mf.txt

Potential Root Compromise in MicroFocus Cobol Summary ------- If the AppTrack feature is enabled, the default install of MicroFocus Cobol 4.1 Merant's commercial suite of cobol utilities contains a security hole which can lead to root compromise. Specifics --------- In the default install,...

openbsdrace.txt

[email protected] Georgi Guninski security advisory 47, 2001 OpenBSD 2.9,2.8 local root compromise Systems affected: OpenBSD 2.9,2.8 Have not tested on other OSes but they may be vulnerable Risk: High Date: 14 June 2001 Legal Notice: This Advisory is Copyright c 2001 Georgi Guninski. You may...

Security Advisory FreeBSD-SA-01:

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:42 Security Advisory FreeBSD, Inc. Topic: signal handling during exec may allow local root compromise Category: core Module: kernel Announced: 2001-07-10 Credits: Georgi...

FreeBSD-SA-01:42.signal

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:42 Security Advisory FreeBSD, Inc. Topic: signal handling during exec may allow local root compromise Category: core Module: kernel Announced: 2001-07-10 Revised:...

Security Update: [CSSA-2001-SCO.5] UnixWare: packaging tool exploits

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: UnixWare: packaging tool exploits Advisory number: CSSA-2001-SCO.5 Issue date: 2001 June 29 Cross reference: 1. Problem Description The...

pmpost - another nice symlink follower

Hi, there is a symlink handling problem in the pcp suite from SGI. The binary pmpost will follow symlinks, if setuid root this leads to instant root compromise, as found on SuSE 7.1 I doubt that this a default SuSE package, though. Attached a simple C source to demonstrate this gcc pm.c -o pm the...

BestCrypt 0.60.70.8 - BCTool UMount Buffer Overflow

BestCrypt 0.60.70.8 - BCTool UMount Buffer Overflow // source: https://www.securityfocus.com/bid/2875/info BestCrypt is a commercial file system encryption software package distributed by Jetico. BestCrypt offers compatibility on the Windows and Linux platforms, using open development standards t...

[LSD] Solaris kcsSUNWIOsolf.so and dtsession vulnerabilities

There exists a buffer overflow vulnerability in the way the KCMSPROFILES environment variable is handled by the kcsSUNWIOsolf.so library. When appropriately exploited through a kcmsconfigure program it can lead to a local root compromise on a vulnerable system. There also exists a buffer overflow...

buffer overflow fix for NTP

The version of xntp3 that shipped with Slackware 7.1 as well as the version that was in Slackware -current contains a buffer overflow bug that could lead to a root compromise. Slackware 7.1 and Slackware -current users are urged to upgrade to the new packages available for their release. The...

Solaris /usr/lib/dmi/snmpXdmid vulnerability

Summary ------- Title: Solaris SNMP to DMI mapper daemon vulnerability Date Published: 2001-03-15 Bugtraq ID: 2417 CVE CAN: CAN-2001-0236 Class: Boundary Error Condition Buffer Overflow Remotely Exploitable: Yes Locally Exploitable: Yes Description ----------- SNMP and DMI are remote management...

Security Hole in Microfocus Cobol

Summary ------- If the AppTrack feature is enabled, the default install of MicroFocus Cobol 4.1 Merant's commercial suite of cobol utilities contains a security hole which can lead to root compromise. Specifics --------- In the default install, /var/mfaslmf is installed mode 777, and...

Linux Kernel 2.2.x - sysctl() Memory Reading

Linux Kernel 2.2.x - sysctl Memory Reading / source: https://www.securityfocus.com/bid/2364/info The Linux Kernel is the core of the Linux Operating System. It was originally written by Linus Torvalds, and is publicly maintained. A problem in the Linux kernel may allow root compromise. The sysctl...

Linux Kernel 2.2.x - 'sysctl()' Memory Reading

/ source: https://www.securityfocus.com/bid/2364/info The Linux Kernel is the core of the Linux Operating System. It was originally written by Linus Torvalds, and is publicly maintained. A problem in the Linux kernel may allow root compromise. The sysctl call allows a privileged program to read o...

Ports Security Advisory: FreeBSD-SA-01:19.ja-xklock

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:19 Security Advisory FreeBSD, Inc. Topic: ja-xklock port contains a local root compromise Category: ports Module: ja-xklock Announced: 2001-02-07 Credits: Found during...