iDEFENSE Security Advisory 11.08.02b: Non-Explicit Path Vulnerability in QNX Neutrino RTOS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 11.08.02b: http://www.idefense.com/advisory/11.08.02b.txt Non-Explicit Path Vulnerability in QNX Neutrino RTOS November 8, 2002 I. BACKGROUND QNX Software Systems Ltd.'s Neutrino RTOS QNX is a real-time operating system...

Security Update: [CSSA-2002-SCO.27] UnixWare 7.1.1 Open UNIX 8.0.0 : ppptalk root privilege vulnerability

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: UnixWare 7.1.1 Open UNIX 8.0.0 : ppptalk root privilege vulnerability Advisory number: CSSA-2002-SCO.27 Issue date: 2002 June 18 Cross reference: 1. Problem...

IBM Informix SE 7.25 sqlexec - Local Buffer Overflow (1)

IBM Informix SE 7.25 sqlexec - Local Buffer Overflow 1 // source: https://www.securityfocus.com/bid/4891/info Informix is an enterprise database distributed and maintained by IBM. A buffer overflow vulnerability has been reported for Informix-SE for Linux. The overflow is due to an unbounded stri...

IBM Informix SE 7.25 sqlexec - Local Buffer Overflow (2)

IBM Informix SE 7.25 sqlexec - Local Buffer Overflow 2 source: https://www.securityfocus.com/bid/4891/info Informix is an enterprise database distributed and maintained by IBM. A buffer overflow vulnerability has been reported for Informix-SE for Linux. The overflow is due to an unbounded string...

CVE-2002-0356

Vulnerability in XFS filesystem reorganizer fsrxfs in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files...

CVE-1999-1160

Technical details about CVE-1999-1160 are not publicly available in the provided documents. Monitor for updates.

CVE-2001-0533

The CVE-2001-0533 issue affects IBM AIX 4.3.x and 5.1 where the libi18n library is vulnerable to a buffer overflow triggered by a crafted LANG environment value. Local users could gain root privileges when running setuid programs (e.g., aixterm). IBM’s advisory describes temporary fixes (libi18n_...

Cobalt RaQ 2.03.04.0 XTR - MultiFileUpload.php Authentication Bypass (2)

Cobalt RaQ 2.03.04.0 XTR - MultiFileUpload.php Authentication Bypass 2 source: https://www.securityfocus.com/bid/4252/info Cobalt RaQ is a server appliance for Internet-based services. It is distributed and maintained by Sun Microsystems. The 'MultiFileUpload.php' script is not sufficiently...

Cobalt RaQ 2.03.04.0 XTR - MultiFileUpload.php Authentication Bypass (1)

Cobalt RaQ 2.03.04.0 XTR - MultiFileUpload.php Authentication Bypass 1 source: https://www.securityfocus.com/bid/4252/info Cobalt RaQ is a server appliance for Internet-based services. It is distributed and maintained by Sun Microsystems. The 'MultiFileUpload.php' script is not sufficiently...

sastcpd Buffer Overflow and Format String Vulnerabilities

---------------------------------------------------------- sastcpd Buffer Overflow and Format String Vulnerabilities Ministry-of-Peace - www.ministryofpeace.co.uk ---------------------------------------------------------- SYNOPSIS "SAS software provides the foundation, tools, and solutions for da...

CVE-2001-0671

Buffer overflows in 1 sendstatus, 2 killprint, and 3 chkfhost in lpd in AIX 4.3 and 5.1 allow remote attackers to gain root privileges...

Flaws in recent Linux kernels

Hello, There are two bugs present in Linux kernels 2.2.x, x=19 and 2.4.y, y=9. The first vulnerability results in local DoS. The second one, involving ptrace, can be used to gain root privileges locally in case of default install of most popular distributions. Linux 2.0.x is not vulnerable to the...

Ошибка форматной строки в ToolTalk rpc.ttdbserverd (format string)

Позволяет получить привилегии root...

CVE-1999-1247

CVE-1999-1247 affects HP DCE/9000 on HP-UX 9.x via a vulnerability in the HP Camera component, enabling a local attacker to obtain root privileges. The connected documents provide the vulnerability description and affected platform but do not specify the exact root cause, vulnerable versions beyo...

CVE-1999-1471

CVE-1999-1471 affects BSD-based operating systems’ passwd component (versions 4.3 and earlier). The root cause is a buffer overflow when a long shell or GECOS field is supplied, enabling local users to gain root privileges. Connected documents confirm the vulnerability is local and provide no pub...

CVE-1999-1319

Technical details about CVE-1999-1319 are not publicly available in the provided connected documents. Monitor for updates from official sources.

CVE-1999-1166

CVE-1999-1166 affects Linux 2.0.37 and is caused by not properly encoding the Custom segment limit, which allows local users to gain root privileges by accessing or modifying kernel memory. The connected documents reiterate the same description and do not provide a concrete remediation, workaroun...

Digital Unix 4.0 - MSGCHK MH_PROFILE Symbolic Link

source: https://www.securityfocus.com/bid/3320/info The msgchk utility under certain versions of Digital Unix contains an information disclosure vulnerability which could yield root privilege. Because msgchk fails to check file permissions before opening user configuration files in the user's hom...

Digital Unix 4.0 - MSGCHK MH_PROFILE Symbolic Link

Digital Unix 4.0 - MSGCHK MHPROFILE Symbolic Link source: https://www.securityfocus.com/bid/3320/info The msgchk utility under certain versions of Digital Unix contains an information disclosure vulnerability which could yield root privilege. Because msgchk fails to check file permissions before...

Digital Unix 4.0 - MSGCHK Buffer Overflow

// source: https://www.securityfocus.com/bid/3311/info The msgchk utility under certain versions of Digital Unix contains a buffer overflow vulnerability which could yield root privilege. If a local user invokes the msgchk utility at the command line, argumented with a sufficiently long string of...