OPENSUSE-SU-2024:12603-1 cmctl-1.10.2-1.1 on GA media

These are all security issues fixed in the cmctl-1.10.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13778-1 cmctl-1.14.4-1.1 on GA media

These are all security issues fixed in the cmctl-1.14.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13376-1 cmctl-1.13.2-1.1 on GA media

These are all security issues fixed in the cmctl-1.13.2-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2000-1180

The CVE-2000-1180 entry describes a buffer overflow in the cmctl utility of Oracle 8.1.5 Connection Manager Control. The vulnerability is triggered by a long command line argument, allowing local attackers to gain privileges (local privilege escalation). The available sources describe the affecte...

Локальная дырка в Oracle 8 (cmctl buffer overflow)

Переполнение буфера в cmctl позволяет получить euid=oracle и egid=dba...

Oracle 8.x - cmctl Buffer Overflow

Oracle 8.x - cmctl Buffer Overflow / source: https://www.securityfocus.com/bid/1968/info cmctl is the Connection Control Manager, part of the Oracle 8i installation. A vulnerability exists that can allow elevation of privileges. The problem occurs in the way cmctl handles the user-supplied comman...

Oracle 8.x - cmctl Buffer Overflow

/ source: https://www.securityfocus.com/bid/1968/info cmctl is the Connection Control Manager, part of the Oracle 8i installation. A vulnerability exists that can allow elevation of privileges. The problem occurs in the way cmctl handles the user-supplied command line arguments. The string...

cmctl_exp

! /usr/bin/ksh cmctl is installed setuid to Oracle by default. See BugTraq ID 170 and Oracle bug id 701297 and 714293. This script will create a setuid Oracle shell, /tmp/.sh redirect environment variables export ORACLEHOME=/tmp export ORAHOME=/tmp mkdir /tmp/bin chmod a+rx /tmp/bin create cmadmi...