1429 matches found
star fails to set proper permissions on programs specified in RSH environment variable
Overview Star can call external programs specified by the RSH environment variable. This may permit a malicious local user to gain elevated privileges. Description Star is a tape archiving program similar to tar. Star permits the use of storage devices on remote machines via an access program on...
[Full-Disclosure] [ GLSA 200409-11 ] star: Suid root vulnerability
Gentoo Linux Security Advisory GLSA 200409-11 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
GLSA-200409-11 : star: Suid root vulnerability
The remote host is affected by the vulnerability described in GLSA-200409-11 star: Suid root vulnerability A suid root vulnerability exists in versions of star that are configured to use ssh for remote tape access. Impact : Attackers with local user level access could potentially gain root level...
star: Suid root vulnerability
Background star is an enhanced tape archiver, much like tar, that is recognized for it's speed as well as it's enhanced mt/rmt support. Description A suid root vulnerability exists in versions of star that are configured to use ssh for remote tape access. Impact Attackers with local user level...
CVE-2002-0125
Buffer overflow in ClanLib library 0.5 may allow local users to execute arbitrary code in games that use the library, such as 1 Super Methane Brothers, 2 Star War, 3 Kwirk, 4 Clankanoid, and others, via a long HOME environment variable...
CVE-2000-0291
CVE-2000-0291 describes a buffer overflow in Star Office 5.1 triggered by embedding a long URL in a document, resulting in a denial of service. The NVD entry reports a base score of 4.6 (Medium) with local, low complexity access and partial impacts to confidentiality, integrity, and availability....
CVE-2000-0291
Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document...