CVE-2003-0333

Multiple buffer overflows in kermit in HP-UX 10.20 and 11.00 C-Kermit 6.0.192 and possibly other versions before 8.0 allow local users to gain privileges via long arguments to 1 ask, 2 askq, 3 define, 4 assign, and 5 getc, some of which may share the same underlying function "doask," a different...

HP-UX 11.0 /usr/bin/kermit

Hi! There are many buffer overflows in kermit on HP-UX 11.0 . I am sure it is vulnerable in other HP-UX versions, too, since "C-Kermit 6.0.192, 6 Sep 96, for HP-UX 10.00" is installed in HP-UX 11.0 by default. /usr/bin/kermit is setuid to bin and setgrp to daemon, so upon succesfull exploitation,...