EUVD-2002-1575

Malware in sbrugna...

CVE-2002-1594

Buffer overflow in 1 grpck and 2 pwck, if installed setuid on a system as recommended in some AIX documentation, may allow local users to gain privileges via a long command line argument...

CVE-2002-1594

Technical details for CVE-2002-1594 are not publicly available in the provided documents. Monitor for updates from NVD/CVE databases; no affected products, vectors, or fixes are described in the supplied materials.

CVE-2002-1594

Buffer overflow in 1 grpck and 2 pwck, if installed setuid on a system as recommended in some AIX documentation, may allow local users to gain privileges via a long command line argument...

grpck-expl.pl

Hi packetstorm dudez! --- start here --- !/usr/bin/perl www.uhagr.org - [email protected] This is only a Proof of concept. /usr/sbin/grpck is not suid root by default. castle: /usr/sbin/grpck perl -e 'print "X"x2900' Segmentation fault castle: my $usage = Example: ./grpck-expl.pl 1 TARGETS: 1...

Buffer overflow vulnerability in grpck command line utility

Overview The CERT/CC has received a public report of a local buffer overflow vulnerability in the grpck utility. Description The grpck utility performs syntax checking of /etc/group and /etc/gshadow group information files. This utility contains a buffer overflow vulnerability in the section of...