148 matches found
CVE-1999-0084
CVE-1999-0084 affects certain NFS servers . The vulnerability permits a local user to perform a privileged action by running mknod to create a writable kmem device and set the UID to 0, effectively enabling a privilege escalation to root as described in the provided sources. Multiple connected do...
CVE-1999-0084
Certain NFS servers allow users to use mknod to gain privileges by creating a writable kmem device and setting the UID to 0...
kmem.SuSE.txt
Date: Fri, 19 Mar 1999 22:45:29 -0800 From: Aleph One To: [email protected] Subject: The default permissions on /dev/kmem is insecure. SuSE Security Announcement Packages: devs- linux-2.0.35 and below Date: Thu Mar 18 10:22:11 CET 1999 Affected: SuSE 6.0 and below, other Linux distributions Su...
PT-1999-1110 · Linux · Linux
Name of the Vulnerable Software and Affected Versions: Linux versions prior to 2.0.36 Description: The issue concerns the default permissions of the /dev/kmem file in Linux, which allows IP spoofing. Recommendations: For Linux versions prior to 2.0.36, consider updating to version 2.0.36 or later...
CVE-1999-0304
mmap function in BSD allows local attackers in the kmem group to modify memory through devices...
SunOS 4.1.3 - '/etc/crash' SetGID kmem Privilege Escalation
source: https://www.securityfocus.com/bid/59/info /etc/crash was installed setgid kmem and excutable by anyone. Any user can use the ! shell command escape to executes commands, which are then performed with group set to kmem. $ /etc/crash ! sh...
SunOS 4.1.3 - etccrash SetGID kmem Privilege Escalation
SunOS 4.1.3 - etccrash SetGID kmem Privilege Escalation source: https://www.securityfocus.com/bid/59/info /etc/crash was installed setgid kmem and excutable by anyone. Any user can use the ! shell command escape to executes commands, which are then performed with group set to kmem. $ /etc/crash !...