Cray UNICOS /usr/bin/script - Command Line Argument Local Overflow

source: https://www.securityfocus.com/bid/16205/info Cray UNICOS is prone to locally exploitable buffer overflow vulnerabilities. These issues are due to insufficient bounds checking of command line parameters in various utilities with setuid-superuser privileges. Successful exploitation could...

Multiple Vendor BIOS - Keyboard Buffer Password Persistence (1)

source: https://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on the operating system running on affected computers, the memory...

TESO in.telnetd Buffer Overflow DoS Vulnerability

The Telnet server does not return an expected number of replies when it receives a long sequence of SPDX-FileCopyrightText: 2001 Pavel Kankovsky Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

QNX RTOS 6.16.3 - InputTrap Local Arbitrary File Disclosure

QNX RTOS 6.16.3 - InputTrap Local Arbitrary File Disclosure source: https://www.securityfocus.com/bid/14656/info QNX RTOS is susceptible to a local arbitrary file disclosure vulnerability. This issue is due to a failure of the 'inputtrap' utility to properly implement access control restrictions...

FreeBSD-SA-05:17.devfs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:17.devfs Security Advisory The FreeBSD Project Topic: devfs ruleset bypass Category: core Module: devfs Announced: 2005-07-20 Credits: Robert Watson Affects:...

Nokia Affix 2.02.13.x - BTSRVBTOBEX Remote Command Execution

Nokia Affix 2.02.13.x - BTSRVBTOBEX Remote Command Execution source: https://www.securityfocus.com/bid/14232/info Nokia Affix btsrv/btobex are reported prone to a remote command execution vulnerability. The issue exists due to a lack of input sanitization that is performed before using...

Nokia Affix 2.0/2.1/3.x - BTSRV/BTOBEX Remote Command Execution

source: https://www.securityfocus.com/bid/14232/info Nokia Affix btsrv/btobex are reported prone to a remote command execution vulnerability. The issue exists due to a lack of input sanitization that is performed before using attacker-controlled data in a 'system' call. Because the affected...

Gentoo Webapp-Config 1.10 - Insecure File Creation

source: https://www.securityfocus.com/bid/13780/info Gentoo webapp-config is prone to an insecure file creation vulnerability. This issue is due to a design error that causes the application to fail to verify the existence of a file before writing to it. An attacker may leverage this issue to cau...

CVE-2004-1865

Cross-site scripting XSS vulnerability in the administration panel in bBlog 0.7.2 allows remote authenticated users with superuser privileges to inject arbitrary web script or HTML via a blog name $blogname. NOTE: if administrators are normally allowed to add HTML by other means, e.g. through...

Salim Gasmi GLD (Greylisting Daemon) 1.x - Postfix Greylisting Daemon Buffer Overflow

Salim Gasmi GLD Greylisting Daemon 1.x - Postfix Greylisting Daemon Buffer Overflow // source: https://www.securityfocus.com/bid/13129/info It is reported that GLD contains a buffer overflow vulnerability. This issue is due to a failure of the application to properly ensure that a fixed-size memo...

Salim Gasmi GLD (Greylisting Daemon) 1.x - Postfix Greylisting Daemon Buffer Overflow

// source: https://www.securityfocus.com/bid/13129/info It is reported that GLD contains a buffer overflow vulnerability. This issue is due to a failure of the application to properly ensure that a fixed-size memory buffer is sufficiently large prior to copying user-supplied input data into it...

SGI IRIX 6.5.22 - GR_OSView Local Arbitrary File Overwrite

SGI IRIX 6.5.22 - GROSView Local Arbitrary File Overwrite source: https://www.securityfocus.com/bid/13058/info A local file overwrite vulnerability affects SGI IRIX. This issue is due to a failure of the affected utility to drop privileges prior to carrying out critical functionality. An attacker...

Smail 3 - Multiple Remote/Local Vulnerabilities

// source: https://www.securityfocus.com/bid/12899/info Smail-3 is reported prone to multiple vulnerabilities. These issues can allow a local or remote attacker to execute arbitrary code on a vulnerable computer. A successful attack may lead to a complete compromise. The following specific issues...

HP-UX PHCO_29329 : HP-UX NLSPath, Local Increase in Privilege (HPSBUX00294 SSRT3656 rev.2)

s700800 11.22 libc cumulative patch : Superuser cannot restrict the paths set in the NLSPATH environment variable for setuid root programs which are using catopen3C and executed by others. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin we...

HP-UX PHCO_25110 : HPSBUX0111-176 Sec. Vulnerability in rlpdaemon (rev.1)

s700800 11.00 lpspool subsystem cumulative patch : An rlpdaemon logic flaw vulnerability has been reported to us that may allow a remote or local attacker to execute arbitrary code with superuser privilege. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks...

[USN-71-1] PostgreSQL vulnerability

=========================================================== Ubuntu Security Notice USN-71-1 February 01, 2005 postgresql vulnerability http://archives.postgresql.org/pgsql-bugs/2005-01/msg00269.php =========================================================== A security issue affects the following...

USN-71-1: PostgreSQL vulnerability

John Heasman discovered a local privilege escalation in the PostgreSQL server. Any user could use the LOAD extension to load any shared library into the PostgreSQL server; the library's initialisation function was then executed with the permissions of the server. Now the use of LOAD is restricted...

Cisco ONS Multiple Remote Vulnerabilities (20040219-ONS)

According to its version number, the remote Cisco ONS platform has the following vulnerabilities : - The TFTP server allows unauthenticated access to TFTP GET and PUT commands. An attacker may exploit this flaw to upload or retrieve the system files of the remote ONS platform. - A denial of servi...

SGI Irix inpview (InPerson networked multimedia conferencing tool) privilege escalation

User supplied application is executed with superuser privileges...

IBM AIX 5.x - Diag Local Privilege Escalation

IBM AIX 5.x - Diag Local Privilege Escalation source: https://www.securityfocus.com/bid/12041/info diag is reported prone to a local privilege escalation vulnerability. This issue is due to a failure of certain diag applications to properly implement security controls when executing an applicatio...