4 matches found
RedHat Linux 2.1 abuse.console Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/354/info Abuse is a game that is included with RedHat Linux 2.1 in the games package. The console version, abuse.console, is suid-root and will load the program sndrv as root without checking for an absolute pathname. Thi...
CVE-1999-1491
CVE-1999-1491 affects Red Hat 2.1 via abuse.console which uses relative pathnames to locate and execute the undrv program. The underlying issue is path-based execution that allows local users to run arbitrary commands by pointing to a Trojan horse program, enabling complete confidentiality, integ...
abuseconsole.sh
There is a security hole in RedHat 2.1, which installs the game abuse, /usr/lib/games/abuse/abuse.console suid root. The abuse.console program loads its files without absolute pathnames, assuming the user is running abuse from the /usr/lib/games/abuse directory. One of these files in the undrv...
RedHat Linux 2.1 - abuse.console Local Privilege Escalation
RedHat Linux 2.1 - abuse.console Local Privilege Escalation source: https://www.securityfocus.com/bid/354/info Abuse is a game that is included with RedHat Linux 2.1 in the games package. The console version, abuse.console, is suid-root and will load the program sndrv as root without checking for...