EUVD-1999-0838

Malware in sbrugna...

EUVD-1999-0836

Malware in sbrugna...

CVE-1999-0857

FreeBSD gdc program allows local users to modify files via a symlink attack...

FreeBSD 3.3 - gdc Local Buffer Overflow

FreeBSD 3.3 - gdc Local Buffer Overflow // source: https://www.securityfocus.com/bid/834/info There is a buffer overflow vulnerability known to be present in the version of gdc shipped with the 3.3-RELEASE version of FreeBSD. By default, only users in group wheel have execute access to gdc. The...

FreeBSD 3.3 - 'gdc' Symlink

source: https://www.securityfocus.com/bid/835/info It is possible to write debug ouput from gdc to a file /var/tmp/gdbdump. Unfortunately, gdc follows symbolic links which can be created in tmp and will overwrite any file on the system thanks to it being setiud root. This does not cause any...