RedHat Linux 5.1 - xosview

// source: https://www.securityfocus.com/bid/362/info xosview is an X11 system monitoring application that ships with RedHat 5.1 installed setuid root. A buffer overflow vulnerability was found in Xrm.cc, the offending code listed below: char userrfilename1024; strcpyuserrfilename, getenv"HOME";...

Solaris 2.5.1 - kcms Local Buffer Overflow (2)

Solaris 2.5.1 - kcms Local Buffer Overflow 2 / source: https://www.securityfocus.com/bid/452/info There is an unchecked sprintf call in the versions of /usr/openwin/bin/kcmsconfigure shipped with solaris 2.5, 2.5.1 and 2.6. Unfortunately, kcmsconfigure is installed setuid root, making it possible...

HP-UX 10.x/11.x - Aserver PATH

source: https://www.securityfocus.com/bid/1929/info Aserver is a server program that ships with HP-UX versions 10.x and above that is used to interface client applications with the audio hardware. Because it talks to hardware, it is installed setuid root by default. During normal execution, Aserv...

Subject: [SECURITY] Debian not vulnerable to recent minicom exploit

Description Recent messages on a computer security forum have again reported that there are buffer overflows in minicom. These can lead into root exploits if the program is installed setuid root. Vulnerability Debian GNU/Linux 2.0 is not vulnerable to this exploit. The program minicom as shipped...

AIX 3.x - bugfiler Arbitrary File Creation

source: https://www.securityfocus.com/bid/1800/info A vulnerability exists in AIX 3. versions of bugfiler, a utility which automates the process of reporting an filing system bugs. Bugfiler, installed setuid root, creates files in a directory specified by the user invoking the program example:...

SGI IRIX 6.2 - eject Local Privilege Escalation (1)

SGI IRIX 6.2 - eject Local Privilege Escalation 1 // source: https://www.securityfocus.com/bid/351/info A vulnerability exists in the eject program shipped with Irix 6.2 from Silicon Graphics. By supplying a long argument to the eject program, it is possible to overwrite the return address on the...

SGI IRIX 6.2 - 'eject' Local Privilege Escalation (2)

// source: https://www.securityfocus.com/bid/351/info A vulnerability exists in the eject program shipped with Irix 6.2 from Silicon Graphics. By supplying a long argument to the eject program, it is possible to overwrite the return address on the stack, and execute arbitrary code as root. Eject ...

Solaris 2.5.1 - 'chkey' Local Privilege Escalation

/ source: https://www.securityfocus.com/bid/207/info The chkey program is used to change a users secure RPC Diffie-Hellman public key and secret key pair. A buffer overflow condition has been found in the chkey program. Since chkey has setuid root permissions, an unauthorized user may be able to...

SGI IRIX 6.2 - usrlibnetaddpr Local Privilege Escalation

SGI IRIX 6.2 - usrlibnetaddpr Local Privilege Escalation source: https://www.securityfocus.com/bid/330/info SGI's IRIX 5.x and 6.x operating system include a utility called /usr/lib/netaddpr. This program can be used by privledged users to add network printing devices to the system. A race...

SGI IRIX 6.2 - '/usr/lib/netaddpr' Local Privilege Escalation

source: https://www.securityfocus.com/bid/330/info SGI's IRIX 5.x and 6.x operating system include a utility called /usr/lib/netaddpr. This program can be used by privledged users to add network printing devices to the system. A race condition exists in this program that could allow any...

BSDI BSDOS 2.1 FreeBSD 2.1 IBM AIX 4.2 SGI IRIX 6.4 Sun SunOS 4.1.3 - Buffer Overrun

BSDI BSDOS 2.1 FreeBSD 2.1 IBM AIX 4.2 SGI IRIX 6.4 Sun SunOS 4.1.3 - Buffer Overrun / source: https://www.securityfocus.com/bid/129/info Rdist is a program to maintain identical copies of files over multiple hosts. It preserves the owner, group, mode, and mtime of files if possible and can updat...

CVE-1999-1205

nettune in HP-UX 10.01 and 10.00 is installed setuid root, which allows local users to cause a denial of service by modifying critical networking configuration information...

Inktomi Traffic Server traffic_manager local overflow.

Advisory ID Internal CORE-220620 Bugtraq ID: 5098 CVE Name: CVE-2002-1013 Title: Inktomi Traffic Server trafficmanager local overflow. Class: Boundary error condition buffer overflow Remotely Exploitable: NO Locally Exploitable: Yes Vendors contacted: Inktomi Corporation INKT . Inital email sent:...