SCO 5.0.6 issues (lpadmin)

====================================================================== Strategic Reconnisiance Team Security AdvisorySRT2001-07 Topic: SCO 5.0.6 issues lpadmin Vendor: SCO Release Date: 03/27/01 ====================================================================== .: Description SCO OpenServer...

SCO 5.0.6 MMDF issues (deliver)

====================================================================== Strategic Reconnisiance Team Security AdvisorySRT2001-03 Topic: SCO 5.0.6 MMDF issues deliver Vendor: SCO Release Date: 03/27/01 ====================================================================== .: Description SCO...

SCO 5.0.6 issues (lpforms)

====================================================================== Strategic Reconnisiance Team Security AdvisorySRT2001-06 Topic: SCO 5.0.6 issues lpforms Vendor: SCO Release Date: 03/27/01 ====================================================================== .: Description SCO OpenServer...

SCO OpenServer 5.0.6 - lpadmin Buffer Overflow

source: https://www.securityfocus.com/bid/2553/info SCO OpenServer 5.0.6 and possibly earlier versions ships with several suid 'bin' executables used in printer administration and related tasks. This includes lpadmin, a component used to manage and configure print destinations, devices and printe...

SCO Open Server 5.0.6 - recon Buffer Overflow

SCO Open Server 5.0.6 - recon Buffer Overflow source: https://www.securityfocus.com/bid/2560/info SCO OpenServer 5.0.6 and possibly earlier versions ships with a suid 'bin' executable called 'recon'. 'recon' is used to buffer and forward escape sequences from a user's input to timing-sensitive...

CVE-2001-0124

Buffer overflow in exrecover in Solaris 2.6 and earlier possibly allows local users to gain privileges via a long command line argument...

CVE-2001-0111

Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile command line argument...

Дырки в Half Life

Переполнения буфера и ошибки коммандной строки в командах exec, map и при разборе конфигурационных файлов...

Дырка в ascsc (buffer overflow)

переполнение буфера при разборе аргументов командной строки. Программа не-suid в установке по-умолчанию...

Elm 2.5.3 - Alternative-Folder Buffer Overflow

Elm 2.5.3 - Alternative-Folder Buffer Overflow // source: https://www.securityfocus.com/bid/2403/info There is a buffer overflow in elm 2.5 PL3. This overflow is accessible by passing a long string to the -f Alternative-Folder command-line option. This vulnerability may not be restricted to this...

Elm 2.5.3 - Alternative-Folder Buffer Overflow

// source: https://www.securityfocus.com/bid/2403/info There is a buffer overflow in elm 2.5 PL3. This overflow is accessible by passing a long string to the -f Alternative-Folder command-line option. This vulnerability may not be restricted to this version of elm. / ------------- elm253-exploit....

Cisco Security Advisory: Cisco Content Services Switch Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Security Advisory: Cisco Content Services Switch Vulnerability Revision 1.0 For Public Release 2001 January 31 08:00 GMT +0800 ------------------------------------------------------------------------ Summary ------ The Cisco Content Services CSS switch product,...

phf CGI Script fails to guard against newline characters

Overview This document describes a vulnerability in a CGI script known as phf which was widely exploited in 1996 and 1997. Description The phf CGI script constructs a partial command line consisting of the ph command and appropriate arguments, and completes the command line based on the input fro...

Дырка в write в Solaris

Переполнение буфера в аргументе командной строки дает возможность получить egid tty...

CVE-2000-1175

Buffer overflow in Koules 1.4 allows local users to execute arbitrary commands via a long command line argument...

CVE-2000-0987

Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter...

Дырки в почтовых программах под Windows

Дырки во многих программаз работающих через коммандную строку используемых на Web-Серверах...

XATO Advisory: Win32 Command-Line Mailers

---------------------------------------------------------------------------- Xato Network Security, Inc. www.xato.net Security Advisory XATO-122000-01 December 12, 2000 - MULTIPLE VENDOR COMMAND-LINE MAILER HOLES - SMTP Command-Line Mailers on Win32 Web Servers...

SRADV00007.txt

================================================= Secure Reality Pty Ltd. Security Advisory 7 SRADV00007 http://www.securereality.com.au ================================================= Title Local root compromise through Lexmark MarkVision printer drivers Released 6/11/2000 Vulnerable Versions...

Oracle 8.x - cmctl Buffer Overflow

/ source: https://www.securityfocus.com/bid/1968/info cmctl is the Connection Control Manager, part of the Oracle 8i installation. A vulnerability exists that can allow elevation of privileges. The problem occurs in the way cmctl handles the user-supplied command line arguments. The string...