FreeBSD 3.3 - xmindpath Local Buffer Overflow

FreeBSD 3.3 - xmindpath Local Buffer Overflow / source: https://www.securityfocus.com/bid/839/info The version of xmindpath shipped with FreeBSD 3.3 can be locally exploited via overrunning a buffer of predefined length. It is possible to gain the effective userid of uucp through this...

PT-1999-1105 · Umapfs · Umapfs

Name of the Vulnerable Software and Affected Versions: umapfs affected versions not specified Description: The issue allows local users to gain root privileges. This is achieved by changing their uid through a malicious mount umap program. Recommendations: At the moment, there is no information...

PT-1999-1188 · Unix · Unix

Name of the Vulnerable Software and Affected Versions: Unix affected versions not specified Description: The issue concerns a Unix account with a name other than "root" that has UID 0, effectively granting it root privileges. Recommendations: At the moment, there is no information about a newer...

PT-1999-1189 · Unix · Unix

Name of the Vulnerable Software and Affected Versions: Unix affected versions not specified Description: The issue arises when two or more Unix accounts share the same user ID UID, potentially leading to unauthorized access and privilege escalation. Recommendations: At the moment, there is no...

CVE-1999-1308

Certain programs in HP-UX 10.20 do not properly handle large user IDs UID or group IDs GID over 60000, which could allow local users to gain privileges...

UNICOS 9MAX 1.3mk 1.5 AIX 4.2 libc 5.2.18 RedHat 4 IRIX 6 Slackware 3 - NLS (1)

UNICOS 9MAX 1.3mk 1.5 AIX 4.2 libc 5.2.18 RedHat 4 IRIX 6 Slackware 3 - NLS 1 / source: https://www.securityfocus.com/bid/711/info Cray UNICOS 9.0/9.2/MAX 1.3/mk 1.5,AIX = 4.2,Linux libc = 5.2.18,RedHat 4.0,IRIX 6.2,Slackware 3.1 Natural Language Service NLS Vulnerability 1 A buffer overflow...

Solaris 7.0 - 'Coredump' File Write

source: https://www.securityfocus.com/bid/296/info There is a vulnerability in the way Solaris 2.4 pre Jumbo Kernel Patch -35 for SPARC dumps core files. Under normal operation the operating system writes out a core image of a process when it is terminated due to the receipt of some signals. The...

CVE-2026-53614

Local Privilege Escalation via LIBMOUNTFORCEMOUNT2 Environment Variable - nosuid/noexec Bypass in SUID mount8...

PT-2010-5671 · Linux +1 · Linux-Pam +1

Name of the Vulnerable Software and Affected Versions: Linux-PAM versions prior to 1.1.2 Description: The issue is related to the run coprocess function in pam xauth.c in the pam xauth module, which does not check the return values of the setuid, setgid, and setgroups system calls. This might all...