FreeBSD-SA-00:58.chpass

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:58 Security Advisory FreeBSD, Inc. Topic: chpass family contains local root vulnerability Category: core Module: chfn/chpass/chsh/ypchfn/ypchpass/ypchsh/passwd Announced:...

Дырки в LPR-утилитах BSD

Ошибка форматной строки...

Переполнения буфера в HP-UX

Переполнения буфера в суидных утилитах df root, exrecover root, uusub uucp...

Linux news 11.04.00

Linuxconf 1.17r10 Вышла новая версия мощной утилиты конфигурирования Linux систем. Это т.н. bugfix release. Пофиксен баг в модуле pppdialin ошибка в ppplogin и в модуле inetdconf. Подробнее: http://www.appwatch.com Возрожденная Amiga строит мультимедийную Linux-платформу Gateway строила грандиозн...

CVE-2000-0088

Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data" vulnerability...

CVE-2000-0088

CVE-2000-0088 describes a buffer overflow in the conversion utilities for Word 5 documents (Japanese, Korean and Chinese) that allows a local attacker to execute arbitrary commands. The vulnerability is identified as the "Malformed Conversion Data" issue. The available references indicate a high ...

CVE-1999-0741

QMS CrownNet Unix Utilities for 2060 allows root to log on without a password...

CVE-1999-0741

CVE-1999-0741 affects QMS CrownNet Unix Utilities for 2060. The vulnerability allows a non-authenticated attacker to gain root access (log on without a password) via the authentication mechanism, enabling complete control over the system. The CVSS data indicates a high-severity, network-exploitab...

SCO Unixware 7.1 - pkg Local Privilege Escalation

SCO Unixware 7.1 - pkg Local Privilege Escalation source: https://www.securityfocus.com/bid/850/info Certain versions of SCO's Unixware only version 7.1 was tested ship with a series of package install/removal utilities which due to design issues under the SCO UnixWare operating system may read a...

SCO Unixware 7.1 - 'pkg' Local Privilege Escalation

source: https://www.securityfocus.com/bid/850/info Certain versions of SCO's Unixware only version 7.1 was tested ship with a series of package install/removal utilities which due to design issues under the SCO UnixWare operating system may read any file on the system regardless of their permissi...

Solaris 7.0 - CDE dtmailmailtool Buffer Overflow

Solaris 7.0 - CDE dtmailmailtool Buffer Overflow // source: https://www.securityfocus.com/bid/832/info here are three buffer overflow vulnerabilities in the CDE mail utilities, all of which are installed sgid mail by default. The first is exploited through overrunning a buffer in the Content-Type...

SuSE Linux 6.16.2 - cwdtools Local Overflow Local Privilege Escalation

SuSE Linux 6.16.2 - cwdtools Local Overflow Local Privilege Escalation ! /bin/sh source: https://www.securityfocus.com/bid/738/info cdwtools is a package of utilities for cd-writing. The linux version of these utilities, which ships with S.u.S.E linux 6.1 and 6.2, is vulnerable to several local...

CVE-1999-0741

QMS CrownNet Unix Utilities for 2060 allows root to log on without a password...

Compaq Java Applet for Presario SpawnApp - Code Execution

Compaq Java Applet for Presario SpawnApp - Code Execution source: https://www.securityfocus.com/bid/557/info Some Compaq computers come with a Java applet called SpawnApp. This applet is used to run Compaq diagnostic utilities from the local hard drive when certain Compaq websites are viewed. The...

Compaq Java Applet for Presario SpawnApp - Code Execution

source: https://www.securityfocus.com/bid/557/info Some Compaq computers come with a Java applet called SpawnApp. This applet is used to run Compaq diagnostic utilities from the local hard drive when certain Compaq websites are viewed. The problem is that the applet can run any program, and can b...

[SECURITY] New version of bind fixes buffer overflows

We have received reports that the nslookup and dig utilities as shipped with current distribution of Linux contain possible buffer overflows. We recommend you upgrade your bind package immediately. wget url will fetch the file for you dpkg -i file.deb will install the referenced file. Debian...

CVE-1999-1380

Symantec Norton Utilities 2.0 for Windows 95 marks the TUNEOCX.OCX ActiveX control as safe for scripting, which allows remote attackers to execute arbitrary commands via the run option through malicious web pages that are accessed by browsers such as Internet Explorer 3.0...

PT-2003-2525 · Linux · Nfs-Utils

Name of the Vulnerable Software and Affected Versions: nfs-utils versions prior to 1.0.4 Description: The issue is caused by an off-by-one error in the xlog function of mountd in the Linux NFS utils package. This error allows remote attackers to cause a denial of service and possibly execute...

Compute Cluster Pack Service Pack 1

Microsoft® Compute Cluster Pack Service Pack 1 SP1 provides improved reliability and performance for Windows compute clusters. This service pack provides support for Windows Server® 2003 with Service Pack 2 SP2 and Windows Deployment Services. In addition, this service pack supports the Compute...