163 matches found
Debian DSA-129-1 : uucp - remote denial of service
We have received reports that in.uucpd, an authentication agent in the uucp package, does not properly terminate certain long input strings. This has been corrected in uucp package version 1.06.1-11potato3 for Debian 2.2 potato and in version 1.06.1-18 for the upcoming woody release. %NASLMINLEVE...
UUCP Server Detection
Binary data 1901.prm...
Mandrake Linux Security Advisory : uucp (MDKSA-2001:078)
Zen Parse discovered that an argument handling problem that exists in the uucp package can allow a local attacker to gain access to the uucp user or group. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake Linu...
Solaris 9 (sparc) : 113322-04
SunOS 5.9: uucp patch. Date this patch was last updated by Sun : Feb/25/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid1353...
CVE-2001-0873
uuxqt in Taylor UUCP package does not properly remove dangerous long options, which allows local users to gain privileges by calling uux and specifying an alternate configuration file with the --config option...
CVE-2001-0873
The CVE-2001-0873 issue affects Taylor UUCP’s uuxqt, where long command-line options are not properly filtered, enabling a local user to gain privileges by invoking uux with a malicious --config file. Public documents confirm the vulnerability primarily as a local-exploit in uuxqt, with Debian (u...
CVE-2001-0873: Undefined Security Weakness
uuxqt in Taylor UUCP package does not properly remove dangerous long options, which allows local users to gain privileges by calling uux and specifying an alternate configuration file with the --config option...
CVE-2002-0912
in.uucpd UUCP server in Debian GNU/Linux 2.2, and possibly other operating systems, does not properly terminate long strings, which allows remote attackers to cause a denial of service, possibly due to a buffer overflow...
CVE-2002-1127
Buffer overflow in uucp in Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long source -s command line parameter...
CVE-2002-1127
CVE-2002-1127: Buffer overflow in uucp for Compaq Tru64/OSF1 3.x enables local users to execute arbitrary code via a long source (-s) argument. Root cause: unchecked buffer handling in uucp. Affected: Tru64/OSF1 3.x; component: uucp. Impact: local code execution; data confidentiality/integrity/av...
CVE-2002-1127
Buffer overflow in uucp in Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long source -s command line parameter...
CVE-2002-1127: Undefined Security Weakness
Buffer overflow in uucp in Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long source -s command line parameter...
CVE-2002-0912
CVE-2002-0912 affects in.uucpd (UUCP server) in Debian GNU/Linux 2.2; long input strings were not terminated properly, enabling remote denial of service (likely via buffer overflow). Debian DSA-129-1 fixes uucp with updated versions 1.06.1-11potato3 (potato) and 1.06.1-18 (woody); OpenVAS notes t...
CVE-2002-0912
in.uucpd UUCP server in Debian GNU/Linux 2.2, and possibly other operating systems, does not properly terminate long strings, which allows remote attackers to cause a denial of service, possibly due to a buffer overflow...
CVE-2002-0912: Undefined Security Weakness
in.uucpd UUCP server in Debian GNU/Linux 2.2, and possibly other operating systems, does not properly terminate long strings, which allows remote attackers to cause a denial of service, possibly due to a buffer overflow...
CVE-2002-0745
Buffer overflow in uucp in AIX 4.3.3...
CVE-2002-0745
CVE-2002-0745 is a reported buffer overflow in the uucp component of IBM AIX 4.3.3. The linked NVD entry lists a CVSS v2 base score of 10.0 (HIGH) with a network attack vector, low attack complexity, no authentication, and complete impact on confidentiality, integrity, and availability. The vulne...
[SECURITY] [DSA-129-1] in.uucpd string truncation problem
Package: uucp Vulnerability: remote dos Debian-specific: yes We have received reports that in.uucpd, an authentication agent in the uucp package, does not properly terminate certain long input strings. This has been corrected in uucp package version 1.06.1-11potato3 for Debian 2.2 potato and in...
CVE-2001-1164
CVE-2001-1164 affects UnixWare 7, specifically the uucp utilities (uucp, uux, bnuconvert, uucico, uuxcmd, uuxqt). The issue is a buffer overflow triggered by long command-line arguments, allowing a local attacker to run arbitrary code. CVSS v2 base score is 7.2 (HIGH) with LOCAL attack vector, LO...