109 matches found
HP-UX Security patch : PHCO_9597
The remote host is missing HP-UX Security Patch number PHCO9597 . Security Vulnerability in chfn executable %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16948; scriptversion"1.6"...
Mandrake Linux Security Advisory : util-linux (MDKSA-2002:047)
Michal Zalewski found a vulnerability in the util-linux package with the chfn utility. This utility allows users to modify some information in the /etc/passwd file, and is installed setuid root. Using a carefully crafted attack sequence, an attacker can exploit a complex file locking and...
RHEL 2.1 : util-linux (RHSA-2002:137)
The util-linux package shipped with Red Hat Linux Advanced Server contains a locally exploitable vulnerability. The util-linux package contains a large variety of low-level system utilities that are necessary for a Linux system to function. The 'chfn' utility included in this package allows users...
OpenBSD 2.x/3.x - CHPass Temporary File Link File Content Revealing
source: https://www.securityfocus.com/bid/6748/info It has been reported that a problem with chpass included with OpenBSD may allow local users to gain access to the content of specific files. This vulnerability requires that lines in the target file be constructed in a specific format. This...
OpenBSD 2.x3.x - CHPass Temporary File Link File Content Revealing
OpenBSD 2.x3.x - CHPass Temporary File Link File Content Revealing source: https://www.securityfocus.com/bid/6748/info It has been reported that a problem with chpass included with OpenBSD may allow local users to gain access to the content of specific files. This vulnerability requires that line...
CVE-1999-1089
Buffer overflow in chfn command in HP-UX 9.X through 10.20 allows local users to gain privileges via a long command line argument...
CVE-1999-1089
The CVE-1999-1089 entry describes a buffer overflow in the HP-UX chfn command (HP-UX 9.X through 10.20) that allows local users to gain privileges via a long command line argument. This is the stated impact: local privilege escalation with complete confidentiality, integrity, and availability imp...
