120 matches found
Linux chfn (SuSE 9.3/10) - Local Privilege Escalation
!/bin/sh Exploit for SuSE Linux 9.1,2,3/10.0, Desktop 1.0, UnitedLinux 1.0 and SuSE Linux Enterprise Server 8,9 'chfn' local root bug. by Hunger Advistory: http://lists.suse.com/archive/suse-security-announce/2005-Nov/0002.html hunger@suse: id uid=1000hunger gid=1000hunger groups=1000hunger...
SuSE Linux <= 9.3, 10 (chfn) Local Root Privilege Escalation Exploit
Exploit for linux platform in category local exploits ==================================================================== SuSE Linux Advistory: http://lists.suse.com/archive/suse-security-announce/2005-Nov/0002.html email protected: id uid=1000hunger gid=1000hunger groups=1000hunger...
CVE-2005-3503
chfn in pwdutils 3.0.4 and earlier on SuSE Linux, and possibly other operating systems, does not properly check arguments for the GECOS field, which allows local users to gain privileges...
CVE-2005-3503
chfn in pwdutils 3.0.4 and earlier on SuSE Linux, and possibly other operating systems, does not properly check arguments for the GECOS field, which allows local users to gain privileges...
CVE-2005-3503
CVE-2005-3503 affects chfn in pwdutils
CVE-2005-3503
chfn in pwdutils 3.0.4 and earlier on SuSE Linux, and possibly other operating systems, does not properly check arguments for the GECOS field, which allows local users to gain privileges...
SUSE Security Announcement: pwdutils, shadow (SUSE-SA:2005:064)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUSE Security Announcement Package: pwdutils, shadow Announcement ID: SUSE-SA:2005:064 Date: Fri, 04 Nov 2005 14:00:00 +0000 Affected Products: SUSE LINUX 10.0 SUSE LINUX 9.3 SUSE LINUX 9.2 SUSE LINUX 9.1 SuSE Linux 9.0 SuSE Linux Desktop 1.0 SuSE Lin...
CVE-2005-3503: Undefined Security Weakness
chfn in pwdutils 3.0.4 and earlier on SuSE Linux, and possibly other operating systems, does not properly check arguments for the GECOS field, which allows local users to gain privileges...
CVE-2005-1335: Undefined Security Weakness
Unknown vulnerability in Mac OS X 10.3.9 allows local users to gain privileges via 1 chfn, 2 chpass, and 3 chsh, which "use external helper programs in an insecure manner."...
CVE-2002-1616: Undefined Security Weakness
Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via 1 su, 2 chsh, 3 passwd, 4 chfn, 5 dxchpwd, and 6 libc...
HP-UX Security patch : PHCO_9597
The remote host is missing HP-UX Security Patch number PHCO9597 . Security Vulnerability in chfn executable %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16948; scriptversion"1.6"...
Mandrake Linux Security Advisory : util-linux (MDKSA-2002:047)
Michal Zalewski found a vulnerability in the util-linux package with the chfn utility. This utility allows users to modify some information in the /etc/passwd file, and is installed setuid root. Using a carefully crafted attack sequence, an attacker can exploit a complex file locking and...
RHEL 2.1 : util-linux (RHSA-2002:137)
The util-linux package shipped with Red Hat Linux Advanced Server contains a locally exploitable vulnerability. The util-linux package contains a large variety of low-level system utilities that are necessary for a Linux system to function. The 'chfn' utility included in this package allows users...
OpenBSD 2.x/3.x - CHPass Temporary File Link File Content Revealing
source: https://www.securityfocus.com/bid/6748/info It has been reported that a problem with chpass included with OpenBSD may allow local users to gain access to the content of specific files. This vulnerability requires that lines in the target file be constructed in a specific format. This...
OpenBSD 2.x3.x - CHPass Temporary File Link File Content Revealing
OpenBSD 2.x3.x - CHPass Temporary File Link File Content Revealing source: https://www.securityfocus.com/bid/6748/info It has been reported that a problem with chpass included with OpenBSD may allow local users to gain access to the content of specific files. This vulnerability requires that line...
CVE-1999-1089
Buffer overflow in chfn command in HP-UX 9.X through 10.20 allows local users to gain privileges via a long command line argument...
CVE-1999-1089
The CVE-1999-1089 entry describes a buffer overflow in the HP-UX chfn command (HP-UX 9.X through 10.20) that allows local users to gain privileges via a long command line argument. This is the stated impact: local privilege escalation with complete confidentiality, integrity, and availability imp...
CVE-1999-1089: Undefined Security Weakness
Buffer overflow in chfn command in HP-UX 9.X through 10.20 allows local users to gain privileges via a long command line argument...