5461 matches found
Sun Solaris 7.0 - 'ff.core' Local Privilege Escalation
source: https://www.securityfocus.com/bid/327/info There is a vulnerability in Solaris's ff.core utility which allows normal users to execute the rename command as root. This particular bug when leveraged against a series of other configuration issues in a standard Solaris setup can lead to a roo...
CVE-1999-0660
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is not about any specific product, protocol, or design, so it is out of scope of CVE. It might be more appropriate to cover under the Common Configuration Enumeration CCE. Notes: the former description is:...
CVE-1999-0570
Windows NT is not using a password filter utility, e.g. PASSFILT.DLL...
Allaire ColdFusion Server 4.0.1 - 'CFCRYPT.EXE' Decrypt Pages
/ source: https://www.securityfocus.com/bid/275/info A vulnerability in ColdFusion allows pages encrypted with the CFCRYPT.EXE utility to be decrypted. ColdFusion supports the ability to "encrypt" the CFML templates in an application or component, using the CFCRYPT.EXE utility, so they can be...
CVE-1999-1044
Vulnerability in Advanced File System Utility advfs in Digital UNIX 4.0 through 4.0d allows local users to gain privileges...
SGI IRIX 6.3 - pset Local Privilege Escalation
SGI IRIX 6.3 - pset Local Privilege Escalation // source: https://www.securityfocus.com/bid/457/info The pset utility, as shipped by SGI with Irix 5.x and 6.x through 6.3, contains a buffer overflow, which can allow any user on the system to execute arbitrary code on the machine as root. Pset is...
SGI IRIX 6.3 - 'pset' Local Privilege Escalation
// source: https://www.securityfocus.com/bid/457/info The pset utility, as shipped by SGI with Irix 5.x and 6.x through 6.3, contains a buffer overflow, which can allow any user on the system to execute arbitrary code on the machine as root. Pset is used to configure and administer processor grou...
SGI IRIX 6.3 - 'df' Local Privilege Escalation
// source: https://www.securityfocus.com/bid/346/info A buffer overflow exists in IRIX 5.x and 6.x 'df' utility, from Silicon Graphics Inc. By supplying a long argument to the -f option of df, a user can crash the df program. By carefully crafting a buffer containing machine executable code, an...
SGI IRIX 6.3 - df Local Privilege Escalation
SGI IRIX 6.3 - df Local Privilege Escalation // source: https://www.securityfocus.com/bid/346/info A buffer overflow exists in IRIX 5.x and 6.x 'df' utility, from Silicon Graphics Inc. By supplying a long argument to the -f option of df, a user can crash the df program. By carefully crafting a...
SGI IRIX 6.2 - usrlibnetaddpr Local Privilege Escalation
SGI IRIX 6.2 - usrlibnetaddpr Local Privilege Escalation source: https://www.securityfocus.com/bid/330/info SGI's IRIX 5.x and 6.x operating system include a utility called /usr/lib/netaddpr. This program can be used by privledged users to add network printing devices to the system. A race...
SGI IRIX 6.4 - inpview Local Privilege Escalation
SGI IRIX 6.4 - inpview Local Privilege Escalation source: https://www.securityfocus.com/bid/381/info The inpview utility, included by SGI in its Irix operating system, contains a vulnerability that will allow any local user to obtain root access. inpview is part of the InPerson dektop video...
SGI IRIX 6.4 - 'inpview' Local Privilege Escalation
source: https://www.securityfocus.com/bid/381/info The inpview utility, included by SGI in its Irix operating system, contains a vulnerability that will allow any local user to obtain root access. inpview is part of the InPerson dektop video conferencing package. As it needs to access a video...
CVE-1999-0369
The Sun sdtcmconvert calendar utility for OpenWindows has a buffer overflow which can gain root access...
FreeBSD-SA-96:20.stack-overflow
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-96:20 Security Advisory FreeBSD, Inc. Topic: unauthorized access via buffer overruns cron, crontab, ppp Category: core Module: cron, crontab, ppp Announced: 1996-12-16...
SGI IRIX 5.3 - pkgadjust Local Privilege Escalation
SGI IRIX 5.3 - pkgadjust Local Privilege Escalation source: https://www.securityfocus.com/bid/419/info A vulnerability exists in the pkgadjust utility shipped with Irix 5.3 from Silicon Graphics. This vulnerability can result in the compromise of the root account. % cat getroot.c int main setuid0...
SGI IRIX 5.3 - 'pkgadjust' Local Privilege Escalation
source: https://www.securityfocus.com/bid/419/info A vulnerability exists in the pkgadjust utility shipped with Irix 5.3 from Silicon Graphics. This vulnerability can result in the compromise of the root account. % cat getroot.c int main setuid0; chown"sh",0,0; chmod"sh",04755; return 0; % cc...
FreeBSD-SA-96:16.rdist
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-96:16 Security Advisory Revised: Fri Jul 12 09:32:53 PDT 1996 FreeBSD, Inc. Topic: security vulnerability in rdist Category: core Module: rdist Announced: 1996-07-12 Affects...
FreeBSD-SA-96:03.sendmail-suggestion
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-96:03 Security Advisory FreeBSD, Inc. Topic: suggested action only sendmail smrsh now available Category: core Module: sendmail Announced: 1996-04-20 Affects: FreeBSD 2.1.0...
Elm 2.4 - 'filter' Arbitrary Mail Disclosure
source: https://www.securityfocus.com/bid/1802/info Elm is a popular Unix mail client. A vulnerability exists in Elm's 'filter' utility which can grant an attacker access to any user's mail spool. By exploiting a race condition which exists in the creation of temporary files, an unauthorized user...