Solaris 7.0 - cancel Local Privilege Escalation

Solaris 7.0 - cancel Local Privilege Escalation / source: https://www.securityfocus.com/bid/293/info A buffer overrun condition was discovered in Solaris 2.6 X86 in /usr/bin/cancel. This buffer overflow is apparently present in the SPARC version as well although it is thought to be unexploitable...

Solaris 7.0 - ufsdump Local Buffer Overflow (2)

Solaris 7.0 - ufsdump Local Buffer Overflow 2 // source: https://www.securityfocus.com/bid/680/info A buffer overflow vulnerability in the /usr/lib/fs/ufs/ufsdump setuid program allows local users to obtain root and tty group access. The vulnerability is the result of 'ufsdump' not being able to...

Sun Solaris 7.0 - usrdtbinsdtcm_convert Local Overflow Local Privilege Escalation

Sun Solaris 7.0 - usrdtbinsdtcmconvert Local Overflow Local Privilege Escalation / source: https://www.securityfocus.com/bid/166/info Sdtcmconvert is a setuid-root data conversion utility which converts OpenWindows version 3 calendar data files to version 4 and vice versa. A buffer overflow...

Sun Solaris 7.0 - '/usr/dt/bin/sdtcm_convert' Local Overflow / Local Privilege Escalation

/ source: https://www.securityfocus.com/bid/166/info Sdtcmconvert is a setuid-root data conversion utility which converts OpenWindows version 3 calendar data files to version 4 and vice versa. A buffer overflow condition has been found in sdtcmconvert which may be exploited to obtain root access....

Solaris 7.0 - 'ufsdump' Local Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/680/info A buffer overflow vulnerability in the /usr/lib/fs/ufs/ufsdump setuid program allows local users to obtain root and tty group access. The vulnerability is the result of 'ufsdump' not being able to handle device names of a large length. /...

Solaris 7.0 - aspppd Insecure Temporary File Creation

Solaris 7.0 - aspppd Insecure Temporary File Creation source: https://www.securityfocus.com/bid/292/info Aspppd is a tool shipped with Solaris for dial up PPP access. This tool creates files in the /tmp directory insecurely in particular /tmp/.asppp.fifo allowing other users to link to these file...

Solaris 7.0 - aspppd Insecure Temporary File Creation

source: https://www.securityfocus.com/bid/292/info Aspppd is a tool shipped with Solaris for dial up PPP access. This tool creates files in the /tmp directory insecurely in particular /tmp/.asppp.fifo allowing other users to link to these files an possibly elevate their privelages. This program i...