Solaris 10 (sparc) : 125279-05 (deprecated)

CDE1.6: dtsession patch. Date this patch was last updated by Sun : Nov/27/07 This plugin has been deprecated and either replaced with individual 125279 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/12...

CVE-2007-3471

CVE-2007-3471 describes a buffer overflow in the dtsession component of the Sun Solaris CDE Session Manager affecting Solaris 8–10. Connected Nessus patches for Solaris 10 (x86 and SPARC) show remediation via Sun patching: 125279-09/ -07 and 125280-07/ -10, with patches 125279-10 or higher and 12...

CVE-2002-1605

Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long XKBCHARSET environment variable to 1 dxpause, 2 dxconsole, or 3 dtsession...

CVE-2002-1604

Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to 1 csh, 2 dtsession, 3 dxsysinfo, 4 imapd, 5 inc, 6 uucp, 7 uux, 8 rdist, or 9 deliver...

CVE-2003-0092

Heap-based buffer overflow in dtsession for Solaris 2.5.1 through Solaris 9 allows local users to gain root privileges via a long HOME environment variable...

CVE-2003-0092

CVE-2003-0092 describes a heap-based buffer overflow in Solaris dtsession (Sun Solaris 2.5.1–9) that allows local users to gain root privileges by supplying a long HOME environment variable. The issue arises from an inadequate length check in handling HOME, enabling arbitrary code execution with ...

CVE-2003-0092

Heap-based buffer overflow in dtsession for Solaris 2.5.1 through Solaris 9 allows local users to gain root privileges via a long HOME environment variable...

NSFOCUS SA2003-03: Solaris dtsession Heap Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NSFOCUS Security AdvisorySA2003-03 Topic: Solaris dtsession Heap Buffer Overflow Vulnerability Release Date: 2003-03-31 CVE CAN ID: CAN-2003-0092 Affected system: =================== Sun Solaris 2.5.1 SPARC/x86 Sun Solaris 2.6 SPARC/x86 Sun Solaris 7...

Sun Solaris dtsession buffer overflow

Heap overflow on HOME environment variable parsing...

[Fwd: OpenUnix 8 dtaction dtprintinfo dtsession overflows]

Subject: dtaction dtprintinfo dtsession overflows Date: Wed, 01 Aug 2001 23:27:26 -0400 From: KF [email protected] To: [email protected], [email protected] Bugtraq Bound...thought I would let ya know. /usr/dt/bin/dtaction perl -e 'print "A" x 9000' or HOME=perl -e 'print "A" x...

CVE-2001-0426

Buffer overflow in dtsession on Solaris, and possibly other operating systems, allows local users to gain privileges via a long LANG environmental variable...

CVE-2001-0426

Buffer overflow in dtsession on Solaris, and possibly other operating systems, allows local users to gain privileges via a long LANG environmental variable...

CVE-2001-0426

CVE-2001-0426 describes a buffer overflow in the dtsession component affecting Solaris (and possibly other OSes) that lets local users gain privileges when a long LANG environment variable is processed. The vulnerability is triggered by excessively long LANG values, leading to privilege escalatio...

[LSD] Solaris kcsSUNWIOsolf.so and dtsession vulnerabilities

There exists a buffer overflow vulnerability in the way the KCMSPROFILES environment variable is handled by the kcsSUNWIOsolf.so library. When appropriately exploited through a kcmsconfigure program it can lead to a local root compromise on a vulnerable system. There also exists a buffer overflow...

SGI IRIX 6.5 Solaris 7.08 CDE - usrdtbindtsession Local Buffer Overflow

SGI IRIX 6.5 Solaris 7.08 CDE - usrdtbindtsession Local Buffer Overflow / source: https://www.securityfocus.com/bid/2603/info The CDE Session Manager 'dtsession' is vulnerable to a buffer overflow that could yield root privileges to an attacker. The bug exists in dtsession's LANG environment...