CVE-2003-0420

Information leak in dsimportexport for Apple Macintosh OS X Server 10.2.6 allows local users to obtain the username and password of the account running the tool...

CVE-2002-0988

CVE-2002-0988 describes a buffer overflow in the X server (Xsco) of OpenUNIX 8.0.0 and UnixWare 7.1.1, possibly related to XBM/xkbcomp capabilities. The connected records reiterate the affected products and the vulnerability’s basic nature, but do not provide additional technical details, exploit...

CVE-2002-0987

The CVE-2002-0987 entry refers to X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 that fail to drop privileges before invoking programs (e.g., xkbcomp) via popen. This behavior could allow local users to gain privileges. The described vulnerability is a local privilege escalation due to inad...

CVE-2002-0988

Buffer overflow in X server Xsco in OpenUNIX 8.0.0 and UnixWare 7.1.1, possibly related to XBM/xkbcomp capabilities...

CVE-2002-1510

xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X server if the xdm auth directory does not exist...

CVE-2002-0987

X server Xsco in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local users to gain privileges...

CVE-2002-0988

Buffer overflow in X server Xsco in OpenUNIX 8.0.0 and UnixWare 7.1.1, possibly related to XBM/xkbcomp capabilities...

calderax.txt

The following proof of concepts were provided by Pavel Kankovsky: $ Xserver -xkbdir 'id /tmp/IWASHERE;' exit X server $ grep root /tmp/IWASHERE && echo 'Gotcha!' $ cat /tmp/xkbcomp !/bin/sh id /tmp/IWASHERE ctrl+d $ chmod a+x /tmp/xkbcomp $ Xserver -xkbdir /tmp X server executes /tmp/xkbcomp...

Caldera X Server 7.18.0 - External Program Privileged Invocation

Caldera X Server 7.18.0 - External Program Privileged Invocation source: https://www.securityfocus.com/bid/5575/info Caldera's X Server implementation invokes external commands without dropping existing privilege levels. Xserver calls xkbcomp, and other related utilities, in an unsecure manner...

Caldera X Server 7.1/8.0 - External Program Privileged Invocation

source: https://www.securityfocus.com/bid/5575/info Caldera's X Server implementation invokes external commands without dropping existing privilege levels. Xserver calls xkbcomp, and other related utilities, in an unsecure manner using the popen or system calls. While this would not typically be ...

Open Unix X-Server MIT-SHM module shared memory access

It's possible to gain read/write access to any shared memory segment...

Security Update: [CSSA-2002-SCO.14] Open UNIX 8.0.0 UnixWare 7.1.1 : X server allows access to any shared memory on the system

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: Open UNIX 8.0.0 UnixWare 7.1.1 : X server allows access to any shared memory on the system Advisory number: CSSA-2002-SCO.14 Issue date: 2002 April 08 Cross...

DoS против X-Сервера через Mozilla

Длинная строка из 20 приводит к краху X-Сервера...

Ximian Mozilla: The 2618 Bug

NOTE TO THE MODERATOR: This was sent yesterday but i guess didn't make it since this doesn't seem to affect a redhat itself, it affects the mozilla packages distrbuted by Ximian: The test system look like: bash rpm -qa | grep mozilla mozilla-0.9.8-1.ximian.2 mozilla-mail-0.9.8-1.ximian.2...

SCO OpenServer 5.0.x - StartX Weak XHost Permissions

SCO OpenServer 5.0.x - StartX Weak XHost Permissions source: https://www.securityfocus.com/bid/2731/info OpenServer is a Unix based operating system distributed by Santa Cruz Operations. A problem in access control of the X server could allow a local user to gain elevated privileges. When the X...

MDKSA-2001:029 - Mesa update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Linux-Mandrake Security Update Advisory Package name: Mesa Date: March 13th, 2001 Advisory ID: MDKSA-2001:029 Affected versions: 7.2 Problem Description: Ben Collins identified a temporary file race in the Utah-glx component of the Mesa package which...

CVE-2000-1071

Technical details (affected product, root cause, impact, and fix) are not publicly available in the provided documents. Monitor official CVE records and vendor advisories for updates.

CVE-2000-1071

The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which allows remote attackers to monitor X Windows events and gain privileges...

CVE-2000-1071

The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which allows remote attackers to monitor X Windows events and gain privileges...

CVE-2000-0337

CVE-2000-0337 describes a buffer overflow in the Xsun X server component of Solaris 7. The vulnerability allows local users to gain root privileges by supplying an excessively long -dev parameter. The available documents identify the affected system as Solaris 7 and the vulnerable component as th...