HP Tru64 - NLSPATH Environment Variable Local Buffer Overflow (2)

HP Tru64 - NLSPATH Environment Variable Local Buffer Overflow 2 source: https://www.securityfocus.com/bid/5647/info Tru64 is a commercially available UNIX operating system. Tru64 was originally developed by Digital and is now distributed and maintained by HP. A buffer overflow has been discovered...

Security Update: [CSSA-2002-SCO.36] UnixWare 7.1.1 Open UNIX 8.0.0 : command line buffer overflow in ndcfg

To: [email protected] [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: UnixWare 7.1.1 Open UNIX 8.0.0 : command line buffer overflow in ndcfg Advisory number: CSSA-2002-SCO.36 Issue date: 2002 August...

Linux Kernel 2.4.182.4.19 - Privileged File Descriptor Resource Exhaustion (Denial of Service)

Linux Kernel 2.4.182.4.19 - Privileged File Descriptor Resource Exhaustion Denial of Service / source: https://www.securityfocus.com/bid/5178/info The Linux kernel is a freely available, open source kernel originally written by Linus Torvalds. It is the core of all Linux distributions. Recent...

Interbase 6.0 malloc() issues

====================================================================== Strategic Reconnaissance Team Security Advisory SRT2002-06-17-1043 Topic : Interbase 6.0-1 Date : June 17, 2002 Credit : KF dotslashatsnosoft.com Site : http://www.snosoft.com...

madcr: QnX 4.25 - multiples bof in suid/no suid files

/bin/sample ----------------//------------------------------ cd /bin ls -l sample -rwsrwxr-x 1 root root 20639 Jan 19 1996 sample sample perl -e 'print "A" x 280' Profile based upon 2000 samples/second. //1/bin/sample terminated SIGSEGV at 0005:00000041 1 672 Memory fault sample $perl -e 'print "...

Security Update: [CSSA-2002-SCO.21] OpenServer 5.0.5 OpenServer 5.0.6 : sort command creates temporary files insecurely

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: OpenServer 5.0.5 OpenServer 5.0.6 : sort command creates temporary files insecurely Advisory number: CSSA-2002-SCO.21 Issue date: 2002 May 28 Cross reference: 1...

Security Update: [CSSA-2002-SCO.15] Open UNIX 8.0.0 UnixWare 7.1.1 : Buffer overflow in libX11 with -xrm

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: Open UNIX 8.0.0 UnixWare 7.1.1 : Buffer overflow in libX11 with -xrm Advisory number: CSSA-2002-SCO.15 Issue date: 2002 April 11 Cross reference: 1. Problem...

Compaq tru64 setuids /usr/bin/at and /usr/dt/bin/mailcv

Heres some the results of my latenight audit on Tru64. Its too late for me to mess with Compaqs web site to get the security contact I am tired and don't care or something. If someone has TRU64 gdb binaries I would love them... its too late for me to be playing with the Tru64 ladebug also... get ...

Netwin Webnews 1.1k

Name: Netwin WebNews 1.1k Operation system: tested under Redhat linux 7.0 Vendor status: The vendor has been contacted on the 20th of February and hasn't replied yet. Description: The Netwin Webnews version 1.1k CGI binaries contains 4 default users within the binary that can not be removed. Whil...

Security Update: [CSSA-2002-SCO.3] UnixWare 7: message catalog environment variable vulnerability

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: UnixWare 7: message catalog environment variable vulnerability Advisory number: CSSA-2002-SCO.3 Issue date: 2002 February 7 Cross reference: 1. Problem Descripti...

NetBSD Security Advisory 2002-001 Close-on-exec, SUID and ptrace(2)

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2002-001 ================================= Topic: Close-on-exec, SUID and ptrace2 Version: NetBSD-current: prior to January 14, 2002 NetBSD-1.5.: affected up to and including 1.5.2 NetBSD-1.4.: affected up to and including 1.4.3 Severity...

Security Update: [CSSA-2001-SCO.39] Open UNIX, UnixWare 7: timed does not enforce nulls

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: Open UNIX, UnixWare 7: timed does not enforce nulls Advisory number: CSSA-2001-SCO.39 Issue date: 2001 December 10 Cross reference: 1. Problem Description The...

Security Update: [CSSA-2001-SCO.37] Open UNIX, UnixWare 7: xterms in saved CDE sessions

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: Open UNIX, UnixWare 7: xterms in saved CDE sessions Advisory number: CSSA-2001-SCO.37 Issue date: 2001 December 5 Cross reference: 1. Problem Description In...

SCO skunkware top format strings issue

This is a known issue with other vendors... top format strings issue. SCO never "supported" skunkware it was out of courtesy that the binarys were provided as I was once told. I assume Caldera takes the same position. [email protected] ls -al /usr/local/bin/top lrwxrwxrwx 1 root s...

Security Update: [CSSA-2001-SCO.26] dtterm argument buffer overflow

To: [email protected] [email protected] [email protected] [email protected] Do not reply to this mail. This security advisory is being sent from a nonexistent address in order to avoid spam problems. Caldera's contact address for UNIX security issue...

Security Update: [CSSA-2001-SCO.25] OpenServer: various scoadmin/sysadm subprograms have buffer overflows

To: [email protected] [email protected] [email protected] [email protected] Do not reply to this mail. This security advisory is being sent from a nonexistent address in order to avoid spam problems. Caldera's contact address for UNIX security issue...

Security Update: [CSSA-2001-SCO.21] Open Unix, UnixWare 7: dtaction argument buffer overflow

To: [email protected] [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: Open Unix, UnixWare 7: dtaction argument buffer overflow Advisory number: CSSA-2001-SCO.21 Issue date: 2001 October 1...

lpplus.txt

Multiple Security Holes in LPPlus --------------------------------- echo8, 8/23/2000 Summary ------- LPPlus is Plus Technologies' print management system for unix. Versions prior to v3.3.x have several serious security holes, some of which undermine the integrity of the printing subsystem, some o...

Security Update: [CSSA-2001-SCO.15] Open Unix: lpsystem buffer overflow

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: Open Unix: lpsystem buffer overflow Advisory number: CSSA-2001-SCO.15 Issue date: 2001 August 28 Cross reference: 1. Problem Description A lon...

SCO UnixWare uucico contains buffer overflow via long string of characters sent as command line argument

Overview A buffer overflow in uucico, part of the UUCP package on SCO systems, can allow an intruder to gain elevated privileges. Description SCO UnixWare 7 ships with a utility package called UUCP. The UUCP package allows for the copying of files between different UNIX systems and the sending of...