CVE-1999-1040

Vulnerabilities in 1 ipxchk and 2 ipxlink in NetWare Client 1.0 on IRIX 6.3 and 6.4 allows local users to gain root access via a modified IFS environmental variable...

CVE-1999-1399

spaceball program in SpaceWare 7.3 v1.0 in IRIX 6.2 allows local users to gain root privileges by setting the HOSTNAME environmental variable to contain the commands to be executed...

CVE-1999-1296

Buffer overflow in Kerberos IV compatibility libraries as used in Kerberos V allows local users to gain root privileges via a long line in a kerberos configuration file, which can be specified via the KRBCONF environmental variable...

CVE-1999-1461

The CVE-1999-1461 issue affects IRIX 5.3–6.5.10 where inpview trusts the PATH env var to locate and execute ttsession. A local user can modify PATH to point to a Trojan horse ttsession, enabling privilege escalation to root. The root cause is PATH-based resolution of ttsession, leading to arbitra...

CVE-1999-1501

1 ipxchk and 2 ipxlink in SGI OS2 IRIX 6.3 does not properly clear the IFS environmental variable before executing system calls, which allows local users to execute arbitrary commands...

CVE-1999-1107

The CVE-1999-1107 entry describes a local buffer overflow in KDE’s kppp, triggered by a long PATH environment variable, enabling local users to gain root access. The affected component is kppp within KDE; the underlying cause is a buffer overflow related to PATH handling. The provided references ...

CVE-1999-1501: Undefined Security Weakness

1 ipxchk and 2 ipxlink in SGI OS2 IRIX 6.3 does not properly clear the IFS environmental variable before executing system calls, which allows local users to execute arbitrary commands...

CVE-1999-1040: Undefined Security Weakness

Vulnerabilities in 1 ipxchk and 2 ipxlink in NetWare Client 1.0 on IRIX 6.3 and 6.4 allows local users to gain root access via a modified IFS environmental variable...

CVE-1999-1107: Undefined Security Weakness

Buffer overflow in kppp in KDE allows local users to gain root access via a long PATH environmental variable...

CVE-2001-0533

Buffer overflow in libi18n library in IBM AIX 5.1 and 4.3.x allows local users to gain root privileges via a long LANG environmental variable...

CVE-2001-0366

saposcol in SAP R/3 Web Application Server Demo before 1.5 trusts the PATH environmental variable to find and execute the expand program, which allows local users to obtain root access by modifying the PATH to point to a Trojan horse expand program...

CVE-2001-0426

Buffer overflow in dtsession on Solaris, and possibly other operating systems, allows local users to gain privileges via a long LANG environmental variable...

CVE-2001-0426: Undefined Security Weakness

Buffer overflow in dtsession on Solaris, and possibly other operating systems, allows local users to gain privileges via a long LANG environmental variable...

CVE-2001-0110

CVE-2001-0110 describes a buffer overflow in jazip (Zip/Jaz drive manager) that allows local users to gain root privileges by supplying a long DISPLAY environment variable. OpenVAS/DSA references confirm Debian jazip packages were vulnerable and later fixed; the advisory notes a workaround: the p...

CVE-2001-0110: Undefined Security Weakness

Buffer overflow in jaZip Zip/Jaz drive manager allows local users to gain root privileges via a long DISPLAY environmental variable...

Security Advisory FreeBSD-SA-01:25.kerberosIV

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:25 Security Advisory FreeBSD, Inc. Topic: Local and remote vulnerabilities in Kerberos IV Category: core Module: libkrb, telnetd Announced: 2001-02-14 Credits: Jouko...

CVE-2001-0084

GTK+ library allows local users to specify arbitrary modules via the GTKMODULES environmental variable, which could allow local users to gain privileges if GTK+ is used by a setuid/setgid program...

CVE-2001-0084: Undefined Security Weakness

GTK+ library allows local users to specify arbitrary modules via the GTKMODULES environmental variable, which could allow local users to gain privileges if GTK+ is used by a setuid/setgid program...

CVE-2000-1011

Buffer overflow in catopen function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain root privileges via a long environmental variable...

CVE-2000-0824

The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice to a program, which could allow local users to execute arbitrary commands in setuid programs by specifying their own duplicate environmental variables such as LDPRELOAD or...