[EXPL] Rational Clearcase Exploit Code Released

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

IBM Rational Clearcase buffer overflow

Buffer overflows in few executables...

CVE-2002-1322

Rational ClearCase 4.1, 2002.05, and possibly other versions allows remote attackers to cause a denial of service crash via certain packets to port 371, e.g. via nmap...

CVE-2002-1322

CVE-2002-1322 affects Rational ClearCase 4.1 and 2002.05 (and possibly other versions) and allows remote attackers to cause a denial of service (crash) by sending certain packets to TCP/UDP port 371 (e.g., via nmap). The underlying details specify a network-based DoS vector to a specific service ...

CVE-2002-1322

Rational ClearCase 4.1, 2002.05, and possibly other versions allows remote attackers to cause a denial of service crash via certain packets to port 371, e.g. via nmap...

Rational ClearCase DoS

nmap of TCP/371 port causes service to hang...

ClearCase DoS vulnerabilty

Guardeonic Solutions AG www.guardeonic.com Security Advisory 03-2002 Advisory Name: ClearCase remote DoS Release Date: 11/22/02 Affected Product: Rational R ClearCase R Platform: Solaris 2.5.1 and 8 for sure, other unknown Version: 4.1 patches 27, 28 and 2002.05 patches 9,10 sure, other unknown...

Rational ClearCase 4.1 - Portscan Denial of Service

Rational ClearCase 4.1 - Portscan Denial of Service source: https://www.securityfocus.com/bid/6228/info Rational ClearCase has been reported to be prone to a denial of service condition. It is possible to cause this condition by portscanning a system running the vulnerable version of ClearCase...

Rational ClearCase 4.1 - Portscan Denial of Service

source: https://www.securityfocus.com/bid/6228/info Rational ClearCase has been reported to be prone to a denial of service condition. It is possible to cause this condition by portscanning a system running the vulnerable version of ClearCase. This issue was demonstrated using the nmap portscanni...

CVE-2001-0855

Buffer overflow in dbloader in ClearCase 4.2 and earlier allows local users to gain root privileges via a long TERM environment variable...

CVE-2001-0855

Buffer overflow in dbloader in ClearCase 4.2 and earlier allows local users to gain root privileges via a long TERM environment variable...

CVE-2001-0855

CVE-2001-0855 details a buffer overflow in db_loader of ClearCase 4.2 and earlier, exploitable by a long TERM environment variable to gain root privileges locally. Affected software: ClearCase (db_loader) on version 4.2 and earlier. Root cause: buffer overflow triggered by unbounded TERM value. I...

Rational ClearCase 3.24.x - DB Loader TERM Environment Variable Buffer Overflow

Rational ClearCase 3.24.x - DB Loader TERM Environment Variable Buffer Overflow // source: https://www.securityfocus.com/bid/3523/info ClearCase is a commercially available software change management package. It is maintained and distributed by Rational. A problem with the package could lead to a...

Переполнение буфера в ClearCase db_loader (buffer overflow)

Переполнение буфера при длинной переменной окружения TERM...

ClearCase db_loader TERM environment variable buffer overflow vulnerability

--------------------------------------------------------------------------- ClearCase dbloader TERM environment variable buffer overflow vulnerability --------------------------------------------------------------------------- Release infomation ------------------ Found Date: 2001-10-02 Release...

Rational ClearCase 3.2/4.x - DB Loader TERM Environment Variable Buffer Overflow

// source: https://www.securityfocus.com/bid/3523/info ClearCase is a commercially available software change management package. It is maintained and distributed by Rational. A problem with the package could lead to a local user gaining elevated privileges. The problem is in the handling of...

CVE-1999-0350

The vulnerability CVE-1999-0350 affects ClearCase’s db_loader, where a race condition can allow local users to obtain root privileges by setting SUID bits. The Red Hat and CVE records confirm the issue and describe the root cause as a race in the db_loader program; exploitation details or specifi...

CVE-1999-0350

Race condition in the dbloader program in ClearCase gives local users root access by setting SUID bits...

clearcase2.txt

Date: Tue, 9 Feb 1999 17:57:27 +0100 From: Oezguer Kesim To: [email protected] Subject: Re: L0pht Advisory - Rational Software ClearCase root exploitable race conditions Holla, things are even worse! You may want to remove the setuid flag from /usr/atria/etc/dbloader, but this won't fix the...

ClearCase.txt

L0pht Security Advisory Advisory released Jan 8 1999 Application: Rational Software's Clear Case v3.2 Severity: any local user can become root Author: [email protected] http://www.L0pht.com/advisories.html --- Overview : --- ClearCase is a configuration management program from Rational Software...