CVE-1999-0114

CVE-1999-0114 (Elm 2.4 mail package) : The Elm mail package (elm-2.4) is affected via the filter command, where a symlink attack lets local users execute commands as other users and read other users’ files. Root cause is a directory/file permission/symlink handling flaw in the filter command. Imp...

CVE-1999-1334

Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via 1 long From: headers, 2 long Reply-To: headers, or 3 via a long -f filterfile command line argument...

elm_filter.txt

Subject: elm filter program To: [email protected] Mark Ultor wrote: I've found a bug in filter on Elm 2.4 PL25. filter got SGID on mail group. sowatech:$ filter -f perl -e ' print "A" x 5000' Segmentation fault "filter" is inherently unsafe. A bug has been described in 1995 which allows...

CVE-1999-0114

Local users can execute commands as other users, and read other users' files, through the filter command in the Elm elm-2.4 mail package using a symlink attack...

PT-1998-1028 · Elm · Elm

Name of the Vulnerable Software and Affected Versions: elm-2.4 mail package Description: The issue allows local users to execute commands as other users and read other users' files through the filter command in the Elm mail package. This is achieved by using a symlink attack. Recommendations: For...

CVE-1999-1184

Buffer overflow in Elm 2.4 and earlier allows local users to gain privileges via a long TERM environmental variable...

Elm 2.32.4 - TERM Environment Variable Local Buffer Overrun

Elm 2.32.4 - TERM Environment Variable Local Buffer Overrun source: https://www.securityfocus.com/bid/8030/info A buffer overrun has been discovered in Elm. The problem occurs due to insufficient bounds checking performed before copying user-supplied data into an internal memory buffer...

Elm 2.3/2.4 - TERM Environment Variable Local Buffer Overrun

source: https://www.securityfocus.com/bid/8030/info A buffer overrun has been discovered in Elm. The problem occurs due to insufficient bounds checking performed before copying user-supplied data into an internal memory buffer. Specifically, a TERM environment variable containing excessive data...

Elm 2.4 - 'filter' Arbitrary Mail Disclosure

source: https://www.securityfocus.com/bid/1802/info Elm is a popular Unix mail client. A vulnerability exists in Elm's 'filter' utility which can grant an attacker access to any user's mail spool. By exploiting a race condition which exists in the creation of temporary files, an unauthorized user...