CVE-1999-1059

Vulnerability in rexec daemon rexecd in AT&T TCP/IP 4.0 for various SVR4 systems allows remote attackers to execute arbitrary commands...

CVE-1999-1034

This CVE (CVE-1999-1034) is a local privilege escalation in the login component of AT&T System V Release 4. The NVD entry lists a base score of 7.2 (HIGH) with Local attack vector, low attack complexity, no authentication required, and complete impact on confidentiality, integrity, and availabili...

CVE-1999-1059: Undefined Security Weakness

Vulnerability in rexec daemon rexecd in AT&T TCP/IP 4.0 for various SVR4 systems allows remote attackers to execute arbitrary commands...

CVE-1999-1409: Undefined Security Weakness

The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submitting the file to at with the -f argument, which generates error messages that at sends to the user via e-mail...

CVE-1999-1034: Undefined Security Weakness

Vulnerability in login in AT&T System V Release 4 allows local users to gain privileges...

Переполнение буфера в at под linux (buffer overflow)

Переполнение кучи...

'/usr/bin/at 31337 + vuln' problem + exploit

Affects: /usr/bin/at To check if you are potentially vulnerable to this exploit, execute: /usr/bin/at 31337 + vuln If you are vulnerable this will cause: Segmentation fault If not, there will be a message similar to: Garbled time possibly with some extra information The problem is caused by a bug...

[SECURITY] [DSA 102-1] New at packages fix heap corruption vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 102-1 [email protected] http://www.debian.org/security/ Martin Schulze January 16th, 2002 - -------------------------------------------------------------------------- Package : at...

[SECURITY] [DSA 102-1] New at packages fix heap corruption vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 102-1 [email protected] http://www.debian.org/security/ Martin Schulze January 16th, 2002 - -------------------------------------------------------------------------- Package : at...

AT 3.1.8 - Formatted Time Heap Overflow

source: https://www.securityfocus.com/bid/3886/info at is a freely available, open source scheduler package. It is included with various Unix and Linux operating systems, and maintained by public domain. Under some circumstances, at does not correctly handle time input. A local user attempting to...

AT 3.1.8 - Formatted Time Heap Overflow

AT 3.1.8 - Formatted Time Heap Overflow source: https://www.securityfocus.com/bid/3886/info at is a freely available, open source scheduler package. It is included with various Unix and Linux operating systems, and maintained by public domain. Under some circumstances, at does not correctly handl...

CVE-1999-1072: Undefined Security Weakness

Excite for Web Servers EWS 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext.conf authentication file and replaying the encrypted password in an HTTP request to AT-generated.cgi or AT-admin.cgi...

CVE-1999-1458: Undefined Security Weakness

Buffer overflow in at program in Digital UNIX 4.0 allows local users to gain root privileges via a long command line argument...

CVE-1999-1305: Undefined Security Weakness

Vulnerability in "at" program in SCO UNIX 4.2 and earlier allows local users to gain root access...

CVE-2001-0617

Allied Telesyn AT-AR220e cable/DSL router firmware 1.08a RC14 with the portmapper and the 'Virtual Server' enabled can allow a remote attacker to gain access to mapped services even though the single portmappings may be disabled...

CVE-2001-0617: Undefined Security Weakness

Allied Telesyn AT-AR220e cable/DSL router firmware 1.08a RC14 with the portmapper and the 'Virtual Server' enabled can allow a remote attacker to gain access to mapped services even though the single portmappings may be disabled...

Ошибка форматной строки в at из Solaris (NLS format string)

Ошибка форматной строки при работе с NLS...

"at" is vulnerable on Solaris 7 and 8

We found that "at" in Solaris is vulnerable on Solaris 7 and 8 The kind of bug is discussed on Bugtraqid:1634 -- Generally a program that needs to display a message to the user will obtain the proper language specific string from the database using the original message as the search key and...

CVE-2001-0167

Buffer overflow in AT&T WinVNC Virtual Network Computing client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string...

CVE-2001-0168

Buffer overflow in AT&T WinVNC Virtual Network Computing server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0...