Дырка в man (linux)

Ошиюка форматной строки при разборе агрументов...

Дырка в write в Solaris

Переполнение буфера в аргументе командной строки дает возможность получить egid tty...

Solaris /usr/lib/exrecover buffer overflow

Hi, The /usr/lib/exrecover contains a buffer overflow this command is suid in Solaris 2.4/5/6 The problem occurs when it gets the second argument, it accepts the argument without checking out its lenght and this causes the problem. The overflow seems to be in the heap space. $ /usr/lib/exrecover...

CVE-2000-1108

cons.saver in Midnight Commander mc 4.5.42 and earlier does not properly verify if an output file descriptor is a TTY, which allows local users to corrupt files by creating a symbolic link to the target file, calling mc, and specifying that link as a TTY argument...

CVE-2000-1175

Buffer overflow in Koules 1.4 allows local users to execute arbitrary commands via a long command line argument...

CVE-2000-1147

Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary commands via a long string to the "LANGUAGE" argument in a script tag...

Дырка в TWIG webmail

Используя ошибку в проверке агрументов можно загрузить и выполнить собственный php3-скрипт...

Переполнение буфера в старых версиях route

Переполнение буфера при разборе аргумента в route add...

CVE-1999-0823

CVE-1999-0823 describes a local privilege-escalation vulnerability in FreeBSD’s xmindpath, caused by a buffer overflow triggered by the -f argument. Affected component: xmindpath (FreeBSD). The impact is local privilege gain with partial confidentiality, integrity, and availability impacts report...

Problems with: xcdroast, gatos, xkobo, xbill, iagno, ++

---------------------------------------------------------------- - A result of too much time - [email protected] anno 2000 - ---------------------------------------------------------------- xcdroast Version 0.96e ======================== Comes with Mandrake 7.0, others? I am not sure about...

CVE-1999-0980

Windows NT Service Control Manager SCM allows remote attackers to cause a denial of service via a malformed argument in a resource enumeration request...

CVE-1999-1008

The CVE-1999-1008 issue affects the xsoldier program and allows a local attacker to gain root privileges by supplying a long argument to the program. The description in the provided sources confirms local access vector with privilege escalation to root, but the connected documents do not provide ...

CVE-2000-0099

Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument...

Локальный root через X-сервер

Переполнение буфера при вызове XFree86 с параметром -xkbmap и длинным аргументом. При этом аргумент может содержать только текстовые символы, что затрудняет эксплоит, но не делает его невозможным...

CVE-2000-0186

Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument...

True North Software Internet Anywhere Mail Server 3.1.3 - RETR Denial of Service

source: https://www.securityfocus.com/bid/982/info Submitting a RETR command with a message ID argument longer than 10 numeric characters will result in a crash of the Internet Anywhere Mail Server. A Doctor Watson error message will appear reporting an access violation by MailServer.exe...

CVE-1999-0830

Buffer overflow in SCO UnixWare Xsco command via a long argument...

CVE-1999-0863

Buffer overflow in FreeBSD seyon via HOME environmental variable, -emulator argument, -modems argument, or the GUI...

CVE-1999-0830

Affects SCO UnixWare Xsco command; vulnerability is a buffer overflow caused by mishandling long arguments. The PT-1999-1384 entry specifies SCO UnixWare as affected and notes that details on the exact affected versions are not provided and that there is no information about a fix in newer versio...

CVE-1999-0821

FreeBSD seyon is vulnerable to local privilege escalation by passing a malicious program through the -emulator argument, enabling a non-privileged user to gain higher privileges. The CVSS v2 base score is 4.6 (MEDIUM) with local attack vector and low complexity. No remediation details are provide...