HP-UX 10.x - stmkfont Alternate Typeface Library Buffer Overflow (2)

source: https://www.securityfocus.com/bid/6836/info A buffer overflow vulnerability has been reported in the stmkfont utility shipped with HP-UX systems. The problem occurs due to insufficient bounds checking on user-suplied data to the alternate typeface library command-line option. A local...

HP-UX 10.x - stmkfont Alternate Typeface Library Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/6836/info A buffer overflow vulnerability has been reported in the stmkfont utility shipped with HP-UX systems. The problem occurs due to insufficient bounds checking on user-suplied data to the alternate typeface library command-line option. A local...

HP-UX 10.x - stmkfont Alternate Typeface Library Buffer Overflow (1)

HP-UX 10.x - stmkfont Alternate Typeface Library Buffer Overflow 1 // source: https://www.securityfocus.com/bid/6836/info A buffer overflow vulnerability has been reported in the stmkfont utility shipped with HP-UX systems. The problem occurs due to insufficient bounds checking on user-suplied da...

IBM AIX 4.3.3/5.1/5.2 - 'libIM' Buffer Overflow

source: https://www.securityfocus.com/bid/6840/info A buffer overflow vulnerability has been discovered in the libIM library available for the AIX 4.3, 5.1, 5.2 operating system. As a result it may be possible to overwrite sensitive memory in programs linked to the affected library. By identifyin...

Nethack 3 - Local Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/6806/info By passing an overly large string when invoking nethack, it is possible to corrupt memory. By exploiting this issue it may be possible for an attacker to overwrite values in sensitive areas of memory, resulting in the execution of arbitrary...

Nethack 3 - Local Buffer Overflow (3)

Nethack 3 - Local Buffer Overflow 3 source: https://www.securityfocus.com/bid/6806/info By passing an overly large string when invoking nethack, it is possible to corrupt memory. By exploiting this issue it may be possible for an attacker to overwrite values in sensitive areas of memory, resultin...

Nethack 3 - Local Buffer Overflow (1)

Nethack 3 - Local Buffer Overflow 1 // source: https://www.securityfocus.com/bid/6806/info By passing an overly large string when invoking nethack, it is possible to corrupt memory. By exploiting this issue it may be possible for an attacker to overwrite values in sensitive areas of memory,...

Nethack 3 - Local Buffer Overflow (3)

source: https://www.securityfocus.com/bid/6806/info By passing an overly large string when invoking nethack, it is possible to corrupt memory. By exploiting this issue it may be possible for an attacker to overwrite values in sensitive areas of memory, resulting in the execution of arbitrary...

Nethack 3 - Local Buffer Overflow (2)

Nethack 3 - Local Buffer Overflow 2 // source: https://www.securityfocus.com/bid/6806/info By passing an overly large string when invoking nethack, it is possible to corrupt memory. By exploiting this issue it may be possible for an attacker to overwrite values in sensitive areas of memory,...

Nethack 3 - Local Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/6806/info By passing an overly large string when invoking nethack, it is possible to corrupt memory. By exploiting this issue it may be possible for an attacker to overwrite values in sensitive areas of memory, resulting in the execution of arbitrary...

slocate 2.52.6 - Local Buffer Overrun

slocate 2.52.6 - Local Buffer Overrun source: https://www.securityfocus.com/bid/6676/info A vulnerability has been discovered in slocate. It has been reported that a buffer overrun occurs when running the slocate program with command line arguments of excessive length. Specifically, it is possibl...

slocate 2.5/2.6 - Local Buffer Overrun

source: https://www.securityfocus.com/bid/6676/info A vulnerability has been discovered in slocate. It has been reported that a buffer overrun occurs when running the slocate program with command line arguments of excessive length. Specifically, it is possible to overrun a buffer in slocate by...

ESCPUtil 1.15.2 2 - Printer Name Local Buffer Overflow

source: https://www.securityfocus.com/bid/6658/info It has been reported that a buffer overflow in escputil exists. When supplied with excessively long arguments, it is possible to overwrite stack memory. escputil is reportedly installed setgid 'sys' on Mandrake Linux, so it is possible that this...

ESCPUtil 1.15.2 2 - Printer Name Local Buffer Overflow

ESCPUtil 1.15.2 2 - Printer Name Local Buffer Overflow source: https://www.securityfocus.com/bid/6658/info It has been reported that a buffer overflow in escputil exists. When supplied with excessively long arguments, it is possible to overwrite stack memory. escputil is reportedly installed setg...

MTink 0.9.x - Printer Status Monitor Environment Variable Buffer Overflow

MTink 0.9.x - Printer Status Monitor Environment Variable Buffer Overflow source: https://www.securityfocus.com/bid/6656/info mtink is prone to a locally exploitable buffer overflow condition. This is due to insufficient bounds checking of the HOME environment variable. mtink is reportedly...

MTink 0.9.x - Printer Status Monitor Environment Variable Buffer Overflow

source: https://www.securityfocus.com/bid/6656/info mtink is prone to a locally exploitable buffer overflow condition. This is due to insufficient bounds checking of the HOME environment variable. mtink is reportedly installed setgid 'sys' on Mandrake Linux, so it is possible that this issue may ...

HP-UX XServer contains privilege escalation vulnerability

Overview A privilege escalation vulnerability exists in the HP-UX 11.22 XServer. Description A privilege escalation vulnerability in the HP-UX 11.22 XServer may allow an attacker to gain elevated privileges. For more details, please see HPSBUX0301-238. --- Impact An attacker may be able to gain...

Solaris 2.x/7.0/8 - Derived 'login' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/3681/info The 'login' program is used in UNIX systems to authenticate users with a username and password. The utility is typically invoked at the console, by 'telnetd', 'rlogind', and if configured to do so, SSH. Versions of 'login' descended from System ...

zkfingerd 0.9.1 - say() Format String

zkfingerd 0.9.1 - say Format String // source: https://www.securityfocus.com/bid/6404/info zkfingerd is prone to a format string vulnerability. The affected function does not perform sufficient checks when displaying user-supplied input. It is possible to corrupt memory by passing format strings...

zkfingerd SysLog 0.9.1 - Format String

// source: https://www.securityfocus.com/bid/6402/info zkfingerd is prone to a format string vulnerability. This problem is due to incorrect use of the 'syslog' function to log error messages. It is possible to corrupt memory by passing format strings through the vulnerable logging function. This...