CVE-1999-0358

Digital Unix 4.0 has a buffer overflow in the inc program of the mh package...

Digital UNIX 4.0/4.0 B/4.0 D SUID/SGID Core File Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/74/info Digital UNIX 4.0 will follow symlinks while writting core files if two setuid programs dump core in sucession. The core file is owned by root but with the user's groud id. The core file permissions are 0600. This...

CVE-1999-1044

The CVE-1999-1044 entry concerns the Advanced File System Utility (advfs) in Digital UNIX, affecting versions 4.0 through 4.0d. The vulnerability enables local users to gain privileges, but the provided documents do not disclose the exact root cause, vulnerable function/file, or affected componen...

CVE-1999-1458

The vulnerability CVE-1999-1458 is a buffer overflow in the at program of Digital UNIX 4.0 that allows local users to gain root privileges via a long command line argument. Documented impact: local privilege escalation with complete confidentiality, integrity, and availability impact. The provide...

CVE-1999-0358

Summary: CVE-1999-0358 affects Digital Unix 4.0 with a buffer overflow in the inc program of the mh package. The connected documents (e.g., Red Hat CVE entry and related records) reiterate the same description without providing concrete exploit details, affected version ranges beyond Digital Unix...

digital-unix-4.0-bof.txt

Date: Mon, 25 Jan 1999 12:21:45 -0800 From: Lamont Granquist To: [email protected] Subject: Digital Unix 4.0 exploitable buffer overflows Previously Digital Unix has been relatively immune to buffer overflow attacks due to the lack of an executable stack in the 3.x versions. For the 4.0 versio...