Diskcheck 3.1.1 Symlink Vulnerability

Diskcheck 3.1.1 Symlink Vulnerability 1 Introduction DiskCheck is a Perl script that monitors how much space is available on your hard drive. Basically, it checks your drive space every hour and takes action based on the specifications in the config file /etc/diskcheck.conf. DiskCheck 3.1.1 is...

OpenSSH's UseLogin option allows remote access with root privilege.

OpenSSH's UseLogin option allows remote access with root privilege. 1. Systems affected: The default installation of OpenSSH is not vulnerable, since UseLogin defaults to 'no'. However, if UseLogin is enabled, all versions of OpenSSH prior to 2.1.1 are affected. 2. Description: If the UseLogin...

CVE-1999-0866

CVE-1999-0866 describes a buffer overflow in the UnixWare xauto program that allows local users to gain root privileges. Affected software: UnixWare xauto component. Root cause: buffer overflow leading to privilege escalation. Impact: complete confidentiality, integrity, and availability (per CVS...

CVE-1999-0866

Buffer overflow in UnixWare xauto program allows local users to gain root privilege...

XFree86 server overflow

XFree86 3.3.6 and probably 4.0.0 as well ; - by running X server no matter it's setuid, or called from setuid Xwrapper - works in both cases, seems to me Xwrapper in default RH 6.x distro is rather dumb ; with -xkbmap parameter and over 2100 of 'A's or shellcode, again, it's rather trivial to...

CVE-2000-0218

The CVE-2000-0218 entry concerns a buffer overflow in the Linux mount and umount utilities that allows local users to gain root privileges via a long relative pathname. Affected component: the mount/umount helpers in Linux. Root cause: a buffer overflow vulnerability enabling escalation to root (...

Matt Kimball and Roger Wolff mtr 0.28/0.41 / Turbolinux 3.5 b2/4.2/4.4/6.0 - mtr (2)

// source: https://www.securityfocus.com/bid/1038/info A potential vulnerability exists in the 'mtr' program, by Matt Kimball and Roger Wolff. Versions prior to 0.42 incorrectly dropped privileges on all Unix variants except HPUX. By calling a seteuidgetuid call, the authors hoped to drop...

CVE-2000-0163

asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file...

CVE-1999-0406

CVE-1999-0406 affects the Digital Unix Networker component nsralist, where a buffer overflow could allow local users to obtain root privileges. The description across connected sources consistently states a local-privilege-elevation impact from this buffer overflow, but the documented details do ...

CVE-1999-0948

CVE-1999-0948 describes a buffer overflow in the uum program for the Canna input system that allows local users to gain root privileges. This is corroborated by multiple sources (NVD, CVE List, Red Hat). The connected documents do not specify affected versions, exact root cause details beyond “bu...

CVE-1999-0406

Digital Unix Networker program nsralist has a buffer overflow which allows local users to obtain root privilege...

CVE-1999-0979

The vulnerability CVE-1999-0979 affects the SCO UnixWare privileged process system. Local users can gain root privileges by using a debugger (e.g., gdb) to insert traps into _init before the privileged process runs. The issue is triggered through manipulating the startup path of the privileged in...

IBM Network Station Manager 2.0 R1 - Race Condition

// source: https://www.securityfocus.com/bid/900/info IBM's Network Station Manager is a client/server application which facilitates management for IBM Network Stations. It is possible to locally gain root priviliges on hosts running the NetStation daemon. NetStation which runs as root creates...

CVE-1999-0866

Buffer overflow in UnixWare xauto program allows local users to gain root privilege...

CVE-1999-0312

HP ypbind is identified as the affected software for CVE-1999-0312. The description states that attackers with root privileges can modify NIS data via ypbind. Connected documents reiterate the same vulnerability, but no concrete fix version or remediation is provided in the supplied materials. Th...

CVE-1999-0028

CVE-1999-0028: Local privilege escalation on SGI IRIX via a buffer overflow in /usr/lib/iaf/scheme (login) affecting IRIX 6.5.x up to 6.5.20. Exploitation reportedly requires certain environment variables and a local account to gain root privileges; the advisory notes it is not the same issue as ...

CVE-1999-0025

The vulnerability CVE-1999-0025 affects SGI IRIX df: a buffer/stack overflow caused by insufficient bounds checking on directory or block-device arguments allows a non-privileged process to trigger code execution with root privileges because df is setuid root. CERT/Red Hat ENISA notes describe lo...

solaris-lpstat-bof.txt

Date: Wed, 27 Jan 1999 16:53:51 +0100 From: Anthony C . Zboralski To: [email protected] Subject: HERT Advisory 001 Buffer overflow in Solaris /usr/bin/lpstat -----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------- HERT - Hacker Emergency Response Team...

rxvt.sh

There is a major security hole in rxvt, a terminal emulator for X, when it is run on systems suid root, as is required on many configurations in order to write to the utmp file. It is obvious from the code that this program was not written to be run suid root, its a pity that sysadmins that insta...

AIX 4.1/4.2 - 'pdnsd' Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/3237/info The Source Code Browser's Program Database Name Server Daemon pdnsd component of the C Set ++ compiler for AIX contains a remotely exploitable buffer overflow. This vulnerability allows local or remote attackers to compromise root privileges ...