CVE-1999-1327

Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG environmental variable...

CVE-2001-0366

The CVE-2001-0366 issue affects saposcol in SAP R/3 Web Application Server Demo prior to 1.5, where the process trusts the PATH environment variable to locate and execute the expand program. This design allows local users to escalate to root by altering PATH to point to a Trojan horse expand prog...

CVE-2001-0533

Buffer overflow in libi18n library in IBM AIX 5.1 and 4.3.x allows local users to gain root privileges via a long LANG environmental variable...

FreeBSD-SA-02:06.sudo

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:06 Security Advisory FreeBSD, Inc. Topic: sudo port may enable local privilege escalation Category: ports Module: sudo Announced: 2002-01-16 Credits: Sebastian Krahmer...

FreeBSD-SA-01:63.openssh

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:63 Security Advisory FreeBSD, Inc. Topic: OpenSSH UseLogin directive permits privilege escalation REVISED Category: core/ports Module: openssh Announced: 2001-12-02...

CVE-2001-0739

Guardian Digital WebTool in EnGarde Secure Linux 1.0.1 allows restarted services to inherit some environmental variables, which could allow local users to gain root privileges...

CVE-1999-1184

CVE-1999-1184 describes a buffer overflow in Elm 2.4 and earlier, allowing local users to gain privileges via a long TERM environment variable. Affected: Elm 2.4 and earlier. Impact per CVSS: partial confidentiality, integrity and availability with local, low complexity, no authentication require...

CVE-1999-1040

Vulnerabilities in 1 ipxchk and 2 ipxlink in NetWare Client 1.0 on IRIX 6.3 and 6.4 allows local users to gain root access via a modified IFS environmental variable...

CVE-1999-1461

The CVE-1999-1461 issue affects IRIX 5.3–6.5.10 where inpview trusts the PATH env var to locate and execute ttsession. A local user can modify PATH to point to a Trojan horse ttsession, enabling privilege escalation to root. The root cause is PATH-based resolution of ttsession, leading to arbitra...

CVE-1999-1435

Buffer overflow in libsocks5 library of Socks 5 socks5 1.0r5 allows local users to gain privileges via long environmental variables...

CVE-1999-1399

spaceball program in SpaceWare 7.3 v1.0 in IRIX 6.2 allows local users to gain root privileges by setting the HOSTNAME environmental variable to contain the commands to be executed...

CVE-1999-1296

Buffer overflow in Kerberos IV compatibility libraries as used in Kerberos V allows local users to gain root privileges via a long line in a kerberos configuration file, which can be specified via the KRBCONF environmental variable...

CVE-1999-1501

1 ipxchk and 2 ipxlink in SGI OS2 IRIX 6.3 does not properly clear the IFS environmental variable before executing system calls, which allows local users to execute arbitrary commands...

CVE-1999-1107

The CVE-1999-1107 entry describes a local buffer overflow in KDE’s kppp, triggered by a long PATH environment variable, enabling local users to gain root access. The affected component is kppp within KDE; the underlying cause is a buffer overflow related to PATH handling. The provided references ...

CVE-2001-0533

Buffer overflow in libi18n library in IBM AIX 5.1 and 4.3.x allows local users to gain root privileges via a long LANG environmental variable...

CVE-2001-0366

saposcol in SAP R/3 Web Application Server Demo before 1.5 trusts the PATH environmental variable to find and execute the expand program, which allows local users to obtain root access by modifying the PATH to point to a Trojan horse expand program...

CVE-2001-0426

Buffer overflow in dtsession on Solaris, and possibly other operating systems, allows local users to gain privileges via a long LANG environmental variable...

CVE-2001-0110

CVE-2001-0110 describes a buffer overflow in jazip (Zip/Jaz drive manager) that allows local users to gain root privileges by supplying a long DISPLAY environment variable. OpenVAS/DSA references confirm Debian jazip packages were vulnerable and later fixed; the advisory notes a workaround: the p...

CVE-2000-1124

Buffer overflow in piobe command in IBM AIX 4.3.x allows local users to gain privileges via long environmental variables...

Security Advisory FreeBSD-SA-01:25.kerberosIV

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:25 Security Advisory FreeBSD, Inc. Topic: Local and remote vulnerabilities in Kerberos IV Category: core Module: libkrb, telnetd Announced: 2001-02-14 Credits: Jouko...