PT-2003-1835 · Sco · Sco Internet Manager

Name of the Vulnerable Software and Affected Versions: SCO Internet Manager mana affected versions not specified Description: The issue allows local users to execute arbitrary programs. This is achieved by setting the REMOTE ADDR environment variable to make menu.mana run as if it were called fro...

CVE-2003-0704

KisMAC before 0.05d trusts user-supplied variables when chown'ing files or directories, which allows local users to gain privileges via the $DRIVERKEXT environment variable in 1 vihadriver.sh, 2 macjackload.sh, 3 airojackload.sh, 4 setuidenable.sh, 5 setuiddisable.sh, and using a "similar...

Liquid War 5.4.55.5.6 - HOME Environment Variable Buffer Overflow

Liquid War 5.4.55.5.6 - HOME Environment Variable Buffer Overflow // source: https://www.securityfocus.com/bid/8629/info Liquid War has been reported prone to a buffer overflow condition when handling HOME environment variables of excessive length. The issue presents itself, due to a lack of...

OpenServer 5.0.7 OpenServer 5.0.6 OpenServer 5.0.5 : SCO Internet Manager - local users can gain root level privileges.

To: [email protected] [email protected] [email protected] -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SCO Security Advisory Subject: OpenServer 5.0.7 OpenServer 5.0.6 OpenServer 5.0.5 : SCO Internet Manager - local users can gain root level privileges. Advisory...

Liquid War 5.4.5/5.5.6 - HOME Environment Variable Buffer Overflow

// source: https://www.securityfocus.com/bid/8629/info Liquid War has been reported prone to a buffer overflow condition when handling HOME environment variables of excessive length. The issue presents itself, due to a lack of sufficient boundary checks performed on data contained in the HOME...

SCO OpenServer 5.0.x - 'mana' 'REMOTE_ADDR' Authentication Bypass

!/bin/sh source: https://www.securityfocus.com/bid/8616/info It has been reported that SCO OpenServer Internet Manager 'mana' process is prone to an authentication bypass issue. The issue is reported to occur as a local user is able to export the REMOTEADDR environment variable and set its value ...

CVE-2003-0609

Stack-based buffer overflow in the runtime linker, ld.so.1, on Solaris 2.6 through 9 allows local users to gain root privileges via a long LDPRELOAD environment variable...

CVE-2003-0649

Buffer overflow in xpcd-svga for xpcd 2.08 and earlier allows local users to execute arbitrary code via a long HOME environment variable...

CVE-2003-0649

Affected product: xpcd (including xpcd-svga) prior to version 2.08. Root cause: buffer overflow in xpcd-svga where a long HOME environment variable is copied into a fixed-size buffer in pcd_open. Impact: local attackers could execute arbitrary code (with the Debian/Mandrake notes indicating poten...

CVE-2003-0611

Multiple buffer overflows in xtokkaetama 1.0 allow local users to gain privileges via a long 1 -display command line argument or 2 XTOKKAETAMADIR environment variable...

xtokkaetama 1.0b Local Game Exploit (Red Hat 9.0)

Exploit for linux platform in category local exploits ================================================= xtokkaetama 1.0b Local Game Exploit Red Hat 9.0 ================================================= / xtokkaetama 1.0b local game exploit on Red Hat 9.0 Coded by brahma 31/07/2003...

Sun Solaris Runtime Linker buffer overflow

Buffer overflow on LDPRELOAD environment variable parsing...

DSA-354 xconq - buffer overflows

Bulletin has no description...

XBlast 2.6.1 - HOME Environment Local Buffer Overflow

XBlast 2.6.1 - HOME Environment Local Buffer Overflow // source: https://www.securityfocus.com/bid/8296/info XBlast is contains a locally exploitable buffer overflow vulnerability due to insufficient bounds checking of data supplied via the HOME environment variable. Successful exploitation would...

XBlast 2.6.1 - 'HOME Environment' Local Buffer Overflow

// source: https://www.securityfocus.com/bid/8296/info XBlast is contains a locally exploitable buffer overflow vulnerability due to insufficient bounds checking of data supplied via the HOME environment variable. Successful exploitation would allow a local user to execute code with a gid of game...

Tower Toppler 0.96 - 'HOME Environment' Local Buffer Overflow

// source: https://www.securityfocus.com/bid/8132/info A problem with the software may make elevation of privileges possible. It has been reported that a buffer overflow exists in Tower Toppler. A local user may be able to exploit this issue to execute code with the privileges of the toppler...

CVE-2003-0454

Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via a long HOME environment variable...

CVE-2003-0382

Buffer overflow in Eterm 0.9.2 allows local users to gain privileges via a long ETERMPATH environment variable...

DEBIAN-CVE-2003-0382

Buffer overflow in Eterm 0.9.2 allows local users to gain privileges via a long ETERMPATH environment variable...

CVE-2003-0382

Buffer overflow in Eterm 0.9.2 allows local users to gain privileges via a long ETERMPATH environment variable...