HP Tru64 UNIX "lpr" contains buffer overflow (SSRT2275)

Overview The HP Tru64 UNIX implementation of "lpr" contains a locally exploitable buffer overflow. Description "lpr" is used to send files to a print spool. A locally exploitable buffer overflow in "lpr" may permit a local attacker to gain elevated privileges and execute arbitrary code on a...

CVE-2002-0720

A handler routine for the Network Connection Manager NCM in Windows 2000 allows local users to gain privileges via a complex attack that causes the handler to run in the LocalSystem context with user-specified code...

HP Tru64 UNIX "lpc" contains buffer overflow (SSRT2260)

Overview The HP Tru64 UNIX implementation of "lpc" contains a locally exploitable buffer overflow. Description "lpc" is used to control the line printer system. A locally exploitable buffer overflow in "lpc" may permit a local attacker to gain elevated privileges and execute arbitrary code on a...

HP Tru64 UNIX "traceroute" contains buffer overflow (SSRT2261)

Overview The HP Tru64 UNIX implementation of "traceroute" contains a locally exploitable buffer overflow. Description "traceroute" is used to display the route packets follow from one host to another on the Internet. A locally exploitable buffer overflow in "traceroute" may permit a local attacke...

HP Tru64 UNIX contains buffer overflow in libc libraries (SSRT2257)

Overview The HP Tru64 Unix operating system contains multiple buffer overflow vulnerabilities. Description A vulnerability exists in the way in which the libc libraries handle environment variables in the HP Tru64 UNIX operating system. As a result, local attackers may be able to execute arbitrar...

GDAM123 0.9330.942 - Filename Buffer Overflow

GDAM123 0.9330.942 - Filename Buffer Overflow // source: https://www.securityfocus.com/bid/5578/info The GDAM123 command-line MP3 player is prone to a buffer overflow condition when handling overly long filenames. Under some circumstances, the player may be installed setuid root to allow...

HP Tru64 4.0/5.0/5.1 - _XKB_CHARSET Local Buffer Overflow

source: https://www.securityfocus.com/bid/5648/info Tru64 is a commercially available Unix operating system originally developed by Digital. It is distributed and maintained by HP. A buffer overflow has been discovered in the XKBCHARSET library. A number of programs depend on the library, includi...

HP Tru64 4.05.05.1 - _XKB_CHARSET Local Buffer Overflow

HP Tru64 4.05.05.1 - XKBCHARSET Local Buffer Overflow source: https://www.securityfocus.com/bid/5648/info Tru64 is a commercially available Unix operating system originally developed by Digital. It is distributed and maintained by HP. A buffer overflow has been discovered in the XKBCHARSET librar...

Sun Cobalt RaQ 4.0 - Predictable Temporary Filename Symbolic Link Attack

Sun Cobalt RaQ 4.0 - Predictable Temporary Filename Symbolic Link Attack source: https://www.securityfocus.com/bid/5529/info A vulnerability has been reported in Cobalt RaQ that may allow attackers to obtain elevated privileges. The vulnerability exists in the /usr/lib/authenticate utility which ...

Caldera OpenServer 5.0.x - XSCO Color Database File Heap Overflow

Caldera OpenServer 5.0.x - XSCO Color Database File Heap Overflow source: https://www.securityfocus.com/bid/4985/info OpenServer is commercial Unix operating system originally developed by SCO, and distributed by Caldera. It may be possible for a local user to gain elevated privileges. When Xsco ...

Caldera OpenServer 5.0.x - XSCO Color Database File Heap Overflow

source: https://www.securityfocus.com/bid/4985/info OpenServer is commercial Unix operating system originally developed by SCO, and distributed by Caldera. It may be possible for a local user to gain elevated privileges. When Xsco is executed, and an excessively long argument is supplied to the -...

AMANDA security issues

================================================================== Security advisory: AMANDA ================================================================== Package: AMANDA Version: 2.3.0.4 Date: 26/05/2002 Issue: Local and remote overflows Risk: Medium since this is an old package Credits:...

Security Bulletin MS02-024: Authentication Flaw in Windows Debugger can Lead to Elevated Privileges (Q320206)

---------------------------------------------------------------------- Title: Authentication Flaw in Windows Debugger can Lead to Elevated Privileges Q320206 Date: 22 May 2002 Software: Microsoft Windows Impact: Elevation of Privilege Max Risk: Critical Bulletin: MS02-024 Microsoft encourages...

CVE-2002-0171

IRISconsole 2.0 may allow users to log into the icadmin account with an incorrect password in some circumstances, which could allow users to gain privileges...

Slrnpull Buffer Overflow (-d parameter)

Slrnpull Buffer Overflow -d parameter ======================================= Author: Alex Hernandez [email protected] Thanks all the people from Spain and Argentina. Special Greets: White-B, Paco Spain, Gabriel M. Thanks friends for all the research: + Solar Eclipse...

ISC INN 2.0/2.1/2.2.x - Multiple Local Format String Vulnerabilities

source: https://www.securityfocus.com/bid/4501/info The Internet Software Consortium ISC Internet News INN project is a powerful, mature implementation of a usenet system, including a NNTP server and a newsreading server. It is available for a wide range of Unix based systems, including Linux...

Sun Solaris 2.67.08 - XSun Color Database File Heap Overflow

Sun Solaris 2.67.08 - XSun Color Database File Heap Overflow // source: https://www.securityfocus.com/bid/4408/info Solaris is the freely available Unix operating system distributed by Sun Microsystems. It may be possible for a local user to gain elevated privileges. When Xsun is executed, and an...

Sun Solaris 2.6/7.0/8 - XSun Color Database File Heap Overflow

// source: https://www.securityfocus.com/bid/4408/info Solaris is the freely available Unix operating system distributed by Sun Microsystems. It may be possible for a local user to gain elevated privileges. When Xsun is executed, and an excessively long argument is supplied to the -co flag, a hea...

Caldera UnixWare 7.1.1 - Message Catalog Environment Variable Format String

Caldera UnixWare 7.1.1 - Message Catalog Environment Variable Format String // source: https://www.securityfocus.com/bid/4060/info UnixWare is a commercially available Unix Operating System. It was originally developed by SCO, and is now distributed and maintained by Caldera. A format string...

BRU 17.0 - SetLicense Script Insecure Temporary File Symbolic Link

BRU 17.0 - SetLicense Script Insecure Temporary File Symbolic Link // source: https://www.securityfocus.com/bid/3970/info BRU is a commercially available backup software infrastructure available for both UNIX and Linux Operating Systems. It is distributed and maintained by the Tolis Group. When B...