323 matches found
CVE-2000-0337
Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter...
CVE-2000-0316
CVE-2000-0316 is a local privilege escalation in Solaris 7 lp caused by a buffer overflow via a long -d option. Affected: SunOS/Solaris 7. Patch guidance from connected Nessus entries points to SunOS patch 106236-13 (Solaris 2.6 x86) and patch 107116-20 (Solaris 7 x86). Remediation: install the r...
CVE-2000-0317
Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option...
CVE-2000-0317
CVE-2000-0317 describes a buffer overflow in Solaris 7 lpset, leading to local root privileges when a long -r option is supplied. The entry specifically notes local privilege escalation, but the provided documents do not include detailed information on affected versions beyond Solaris 7, nor expl...
Solaris 7 x86 lp exploit.
Setuid proggie /usr/bin/lp has an easily exploitable buffer overflow. This exploit is for Solaris 7 x86 version, no sparc exploit is available to my knowledge. later, DiGiT / solaris 2.7 /usr/bin/lp local exploit, i386. discovered by DiGiT. try offset 150-250 if sploit fails greets: !ADM,...
Solaris 7 x86 lpset exploit.
Solaris 7 x86 /usr/bin/lpset overflow, there is a small overflow32 bytes in lpset which will yield root access if properly exploited. There is a sparc version avail for this bug, the bug was discovered by duke some time ago. I am releasing this exploit because of a copy-cat exploit on hack.co.za...
Solaris x86 Xsun overflow.
There exists an overflow in /usr/openwin/bin/Xsun setuid root program on solaris 7 x86 version, I'm not sure about sol 8. This bug was discovered and exploited sometime in '98. The program comes default setgid root on the sparc version of solaris. I haven't checked wether this is exploitable on...
CVE-2000-0337
Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter...
CVE-2000-0317
Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option...
CVE-2000-0316
Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option...
Solaris 2.6/7.0 - 'lpset -r' Local Buffer Overflow (1)
// source: https://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. However, when supplied a well crafted buffer containing...
Solaris 7.0/8 - Xsun Buffer Overrun
// source: https://www.securityfocus.com/bid/1140/info A buffer overrun vulnerability exists in the Xsun X11 server, as shipped as part of Solaris 7 and 8 from Sun Microsystems. By supplying a long argument to the -dev option normally used to set the output device, it is possible to execute...
Solaris 7.08 - Xsun Buffer Overrun
Solaris 7.08 - Xsun Buffer Overrun // source: https://www.securityfocus.com/bid/1140/info A buffer overrun vulnerability exists in the Xsun X11 server, as shipped as part of Solaris 7 and 8 from Sun Microsystems. By supplying a long argument to the -dev option normally used to set the output...
CVE-1999-0417
64 bit Solaris 7 procfs allows local users to perform a denial of service...
CVE-1999-0417
CVE-1999-0417 affects 64-bit Solaris 7 procfs; local users can cause a denial of service. The connected documents do not provide further technical details such as root cause, specific vulnerable versions beyond Solaris 7, exploit information, or a remediation/fix.
sun-encryption-weak.txt
Date: Thu, 14 Jan 1999 23:15:55 -0500 From: spoon To: [email protected] Subject: sun "encryption" lameness I was checking out my new fangled desktop in solaris 7. or 2.7 what ever they are calling it, and i Stumbled across a buttion that said "Encrypt file". I was like shit... I took a swig fr...
solaris7.ff.core.txt
Date: Wed, 7 Apr 1999 22:11:03 -0700 From: Russell Van Tassell To: [email protected] Subject: Solaris7 and ff.core Forgive me as I just started playing with Solaris 7 and don't recall seeing this yet posted to Bugtraq. It would appear as though an old bug with the OpenWeirdos File Mangler has...
solaris.7.procfs.dos.txt
Date: Tue, 9 Mar 1999 22:17:19 +0200 From: Toomas Soome To: [email protected] Subject: 64 bit Solaris 7 procfs bug hi! there is bug with 64 bit solaris 7 procfs, every nonprivileged user can crash computer with command 'more /proc/self/psinfo'. Tested with UE3000, U10, UE450. This bug has been...
sun.useradd.expir.date.txt
Date: Thu, 10 Jun 1999 11:16:32 -0500 From: Chad Price To: [email protected] Subject: Sun Useradd program expiration date bug This has been tested and verified only on Solaris 7. Sun has provided a useradd binary as well as the gui admintool for adding new users. This program it's a binary in...
Solaris 2.6/7.0/8 - 'netpr' Local Buffer Overflow (1)
// source: https://www.securityfocus.com/bid/1200/info A buffer overrun exists in the 'netpr' program, part of the SUNWpcu LP package included with Solaris, from Sun Microsystems. Versions of netpr on Solaris 2.6 and 7, on both Sparc and x86 have been confirmed as being vulnerable. The overflow i...