163 matches found
UUCP package contains multiple buffer overflows via long string of characters sent as command line argument
Overview Several Linux/Unix systems ship with a utility package called UUCP derived from System V. A buffer overflow in components of the UUCP package can allow an intruder to gain elevated privileges. Description Several Linux/Unix systems ship with a utility package called UUCP derived from...
Security Update: [CSSA-2001-SCO.4] UnixWare: uucp utilities buffer overflows
To: [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: UnixWare - uucp utilities buffer overflows Advisory number: CSSA-2001-SCO.4 Issue date: 2001 June, 27 Cross reference: 1. Problem Description The uucp utilities are...
Дырка в minicom (format string)
Ошибки форматной строки egid uucp...
Solaris /usr/bin/tip Vulnerability
Vulnerability in Solaris tip1 Date Published: March 27, 2001 Advisory ID: N/A Bugtraq ID: N/A CVE CAN: Non currently assigned. Title: Solaris tip1 Buffer Overflow Vulnerability Class: Boundary Error Condition Remotely Exploitable: No Locally Exploitable: Yes Vulnerability Description: The tip...
Дырка в tip под Solaris (buffer overflow)
переполнение буфера в suid uucp программе...
CVE-2000-0698
Minicom 1.82.1 and earlier on some Linux systems is affected by a local file-creation vulnerability via a symlink attack that could allow a local user to create arbitrary files owned by the uucp user. The description notes the affected version and attack vector, but the documents do not provide r...
[ADV/EXP]: RH6.x root from bash /tmp vuln + MORE
Advisory: its been fixed, check some previous messages. bash1 /tmp vulns Also: uucp exploit - file creation/overwriting symlinks kinda exploit for man/makewhatis Requires: 1 local access to run the program 2 a crash or reboot to happened 3 /etc/cron.weekly/makewhatis.cron to be executed by cron 4...
CVE-2000-0604
CVE-2000-0604 involves the gkermit component on Red Hat Linux installed with the setgid uucp bit, enabling local users to modify files owned by uucp. The underlying issue is an improper installation/permission setup of gkermit, which allows a local attacker to gain partial access to files owned b...
CVE-2000-0604: Undefined Security Weakness
gkermit in Red Hat Linux is improperly installed with setgid uucp, which allows local users to modify files owned by uucp...
Minicom 1.82/1.83 - Capture-file Group Ownership
source: https://www.securityfocus.com/bid/1599/info Minicom is a unix terminal program often used for communication between computers with modems. It is often installed setgid uucp, as this access is required for regular users to use certain devices on the system. Through specifying a capture-fil...
CVE-2000-0604
gkermit in Red Hat Linux is improperly installed with setgid uucp, which allows local users to modify files owned by uucp...
CVE-1999-0641
Technical details for CVE-1999-0641 are not publicly available in the provided documents. Monitor for updates.
CVE-1999-0641
The UUCP service is running...
FreeBSD 3.3 - xmindpath Local Buffer Overflow
FreeBSD 3.3 - xmindpath Local Buffer Overflow / source: https://www.securityfocus.com/bid/839/info The version of xmindpath shipped with FreeBSD 3.3 can be locally exploited via overrunning a buffer of predefined length. It is possible to gain the effective userid of uucp through this...
FreeBSD 3.3 - 'xmindpath' Local Buffer Overflow
/ source: https://www.securityfocus.com/bid/839/info The version of xmindpath shipped with FreeBSD 3.3 can be locally exploited via overrunning a buffer of predefined length. It is possible to gain the effective userid of uucp through this vulnerability. It may be possible, after attaining uucp...
Hylafax Hylafax 4.0.2 - Local Buffer Overflow
Hylafax Hylafax 4.0.2 - Local Buffer Overflow // source: https://www.securityfocus.com/bid/765/info Hylafax is a popular fax server software package designed to run on multiple UNIX operating systems. Some versions of Hylafax ship with a vulnerable sub program 'faxalter'. This program is installe...
Hylafax Hylafax 4.0.2 - Local Buffer Overflow
// source: https://www.securityfocus.com/bid/765/info Hylafax is a popular fax server software package designed to run on multiple UNIX operating systems. Some versions of Hylafax ship with a vulnerable sub program 'faxalter'. This program is installed SUID UUCP and has a buffer overflow which if...
CVE-1999-0303
CVE-1999-0303 describes a buffer overflow in the BNU UUCP daemon (uucpd) triggered by long hostnames. The issue affects the BNU UUCP daemon and is caused by improper handling of hostname lengths, with CVSS metrics indicating a local, low-complexity attack that could impact confidentiality, integr...