BMC Software Patrol 3.2.5 - Patrol SNMP Agent File CreationPermission

BMC Software Patrol 3.2.5 - Patrol SNMP Agent File CreationPermission source: https://www.securityfocus.com/bid/525/info Patrol 3.2, installed out of the box, allows for a local root compromise or denial of service. The vulnerability lies in the creation of a file by snmpagnt that is owned by the...

BMC Software Patrol 3.2.5 - Patrol SNMP Agent File Creation/Permission

source: https://www.securityfocus.com/bid/525/info Patrol 3.2, installed out of the box, allows for a local root compromise or denial of service. The vulnerability lies in the creation of a file by snmpagnt that is owned by the owner of the parent directory of the file and possibly world writeabl...

Caldera OpenUnix 8.0UnixWare 7.1.1 HP HP-UX 11.0 Solaris 7.0 SunOS 4.1.4 - rpc.cmsd Buffer Overflow (2)

Caldera OpenUnix 8.0UnixWare 7.1.1 HP HP-UX 11.0 Solaris 7.0 SunOS 4.1.4 - rpc.cmsd Buffer Overflow 2 // source: https://www.securityfocus.com/bid/524/info There is a remotely exploitable buffer overflow vulnerability in rpc.cmsd which ships with Sun's Solaris and HP-UX versions 10.20, 10.30 and...

Caldera OpenUnix 8.0UnixWare 7.1.1 HP HP-UX 11.0 Solaris 7.0 SunOS 4.1.4 - rpc.cmsd Buffer Overflow (1)

Caldera OpenUnix 8.0UnixWare 7.1.1 HP HP-UX 11.0 Solaris 7.0 SunOS 4.1.4 - rpc.cmsd Buffer Overflow 1 // source: https://www.securityfocus.com/bid/524/info There is a remotely exploitable buffer overflow vulnerability in rpc.cmsd which ships with Sun's Solaris and HP-UX versions 10.20, 10.30 and...

Caldera OpenUnix 8.0/UnixWare 7.1.1 / HP HP-UX 11.0 / Solaris 7.0 / SunOS 4.1.4 - rpc.cmsd Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/524/info There is a remotely exploitable buffer overflow vulnerability in rpc.cmsd which ships with Sun's Solaris and HP-UX versions 10.20, 10.30 and 11.0 operating systems. The consequence is a remote root compromise. / copyright LAST STAGE OF DELIRIU...

Caldera OpenUnix 8.0/UnixWare 7.1.1 / HP HP-UX 11.0 / Solaris 7.0 / SunOS 4.1.4 - rpc.cmsd Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/524/info There is a remotely exploitable buffer overflow vulnerability in rpc.cmsd which ships with Sun's Solaris and HP-UX versions 10.20, 10.30 and 11.0 operating systems. The consequence is a remote root compromise. / Unixware 7.x rpc.cmsd exploit b...

Xi Graphics Accelerated X 4.0.x5.0 - Local Buffer Overflow

Xi Graphics Accelerated X 4.0.x5.0 - Local Buffer Overflow // source: https://www.securityfocus.com/bid/488/info Accelerated-X, also known as Accel-X, is a popular commercial X server available from Xi Graphics. The servers are normally installed setuid root, and contain multiple buffer overflow...

VMware 1.0.1 - Local Buffer Overflow

VMware 1.0.1 - Local Buffer Overflow // source: https://www.securityfocus.com/bid/490/info VMWare is virtual machine software produced by VMWare inc. VMWare version 1.0.1 for Linux is vulnerable to a buffer overflow attack. Since VMWare is installed with binaries that are setuid root, local users...

Xi Graphics Accelerated X 4.0.x/5.0 - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/488/info Accelerated-X, also known as Accel-X, is a popular commercial X server available from Xi Graphics. The servers are normally installed setuid root, and contain multiple buffer overflow vulnerabilities. These vulnerabilities were found in the...

VMware 1.0.1 - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/490/info VMWare is virtual machine software produced by VMWare inc. VMWare version 1.0.1 for Linux is vulnerable to a buffer overflow attack. Since VMWare is installed with binaries that are setuid root, local users can exploit the hole allowing for...

Solaris 2.52.5.12.67.0 - sadmind Remote Buffer Overflow (1)

Solaris 2.52.5.12.67.0 - sadmind Remote Buffer Overflow 1 // source: https://www.securityfocus.com/bid/866/info Certain versions of Solaris ship with a version of sadmind which is vulnerable to a remotely exploitable buffer overflow attack. sadmind is the daemon used by Solstice AdminSuite...

Solaris 2.5/2.5.1/2.6/7.0 - 'sadmind' Remote Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/866/info Certain versions of Solaris ship with a version of sadmind which is vulnerable to a remotely exploitable buffer overflow attack. sadmind is the daemon used by Solstice AdminSuite applications to perform distributed system administration...

Caldera kdenetwork 1.1.1-1 / Caldera OpenLinux 1.3/2.2 / KDE KDE 1.1/1.1. / RedHat Linux 6.0 - K-Mail File Creation

// source: https://www.securityfocus.com/bid/300/info KMail is a mail user agent that comes with the kdenetwork package, part of the K Desktop Environment. A vulnerability in the way KMail creates temporary files to save attachments may allow malicious users to overwrite any file that user runnin...

X11R6 3.3.3 - Symlink

X11R6 3.3.3 - Symlink // source: https://www.securityfocus.com/bid/326/info There is a symlink vulnerability known to exist under most modern linux and NetBSD distributions. It involves /tmp/.X11-unix and the tendency to follow to/overwrite the file pointed to if a symlink. It may be possible for...

X11R6 3.3.3 - Symlink

// source: https://www.securityfocus.com/bid/326/info There is a symlink vulnerability known to exist under most modern linux and NetBSD distributions. It involves /tmp/.X11-unix and the tendency to follow to/overwrite the file pointed to if a symlink. It may be possible for a regular user to wri...

Debian 2.0 - Super Syslog Buffer Overflow

Debian 2.0 - Super Syslog Buffer Overflow // source: https://www.securityfocus.com/bid/342/info // // After the first super buffer overflow vulnerability was discovered, another appeared shortly after. This vulnerability exists when the syslog option is enabled. The overflow is in the file error....

Debian 2.0 - Super Syslog Buffer Overflow

// source: https://www.securityfocus.com/bid/342/info // // After the first super buffer overflow vulnerability was discovered, another appeared shortly after. This vulnerability exists when the syslog option is enabled. The overflow is in the file error.c, in the Error function where the...

CVE-1999-0363

SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise...

Sun Solaris 7.0 - ff.core Local Privilege Escalation

Sun Solaris 7.0 - ff.core Local Privilege Escalation source: https://www.securityfocus.com/bid/327/info There is a vulnerability in Solaris's ff.core utility which allows normal users to execute the rename command as root. This particular bug when leveraged against a series of other configuration...

Sun Solaris 7.0 - 'ff.core' Local Privilege Escalation

source: https://www.securityfocus.com/bid/327/info There is a vulnerability in Solaris's ff.core utility which allows normal users to execute the rename command as root. This particular bug when leveraged against a series of other configuration issues in a standard Solaris setup can lead to a roo...