180 matches found
CVE-2001-0424: Undefined Security Weakness
BubbleMon 1.31 does not properly drop group privileges before executing programs, which allows local users to execute arbitrary commands with the kmem group id...
Дырка в bubblemon (egid kmem)
Не сбрасывается egid kmem при вызове внешнего приложения...
Дырка в brouted
Переполнения буфера в sgid kmem утилите...
Ports Security Advisory: FreeBSD-SA-00:43.brouted
Topic: brouted port allows gid kmem compromise Category: ports Module: brouted Announced: 2000-08-28 Credits: Discovered during internal auditing Affects: Ports collection prior to the correction date. Corrected: 2000-08-22 Vendor status: Contacted FreeBSD only: NO I. Background brouted is a...
FreeBSD-SA-00:43.brouted
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:43 Security Advisory FreeBSD, Inc. Topic: brouted port allows gid kmem compromise Category: ports Module: brouted Announced: 2000-08-28 Credits: Discovered during interna...
FreeBSD 3.03.13.23.33.4 - AsmonAscpu Local Privilege Escalation
FreeBSD 3.03.13.23.33.4 - AsmonAscpu Local Privilege Escalation source: https://www.securityfocus.com/bid/996/info A vulnerability exists in both the ascpu and asmon ports to FreeBSD. Ascpu and asmon are applets for the popular window manager AfterStep. They retain the look and feel of this windo...
CVE-1999-0426
CVE-1999-0426 affects Linux prior to 2.0.36 due to default permissions of the /dev/kmem character device, enabling IP spoofing. Root cause: /dev/kmem permissions allowed spoofing without additional privileges. Impact: network-based spoofing risk on affected systems. Mitigation: upgrade to Linux 2...
CVE-1999-0426: Incorrect Default Permissions
The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing...
CVE-1999-0304
mmap function in BSD allows local attackers in the kmem group to modify memory through devices...
wmmon.freebsd.txt
Posted Tuesday, December 21, 1999 - 16:41 by reid: Steve Reid wrote: Wmmon is a popular program for monitoring CPU load and other system utilization. It runs as a dockapp under WindowMaker. The FreeBSD version of this program has a feature that can be trivially exploited to gain group kmem in...
CVE-1999-0084
Certain NFS servers allow users to use mknod to gain privileges by creating a writable kmem device and setting the UID to 0...
CVE-1999-0084
Certain NFS servers allow users to use mknod to gain privileges by creating a writable kmem device and setting the UID to 0...
CVE-1999-0084
CVE-1999-0084 affects certain NFS servers . The vulnerability permits a local user to perform a privileged action by running mknod to create a writable kmem device and set the UID to 0, effectively enabling a privilege escalation to root as described in the provided sources. Multiple connected do...
CVE-1999-0084: Improper Privilege Management
Certain NFS servers allow users to use mknod to gain privileges by creating a writable kmem device and setting the UID to 0...
kmem.SuSE.txt
Date: Fri, 19 Mar 1999 22:45:29 -0800 From: Aleph One To: [email protected] Subject: The default permissions on /dev/kmem is insecure. SuSE Security Announcement Packages: devs- linux-2.0.35 and below Date: Thu Mar 18 10:22:11 CET 1999 Affected: SuSE 6.0 and below, other Linux distributions Su...
PT-1999-1110 · Linux · Linux
Name of the Vulnerable Software and Affected Versions: Linux versions prior to 2.0.36 Description: The issue concerns the default permissions of the /dev/kmem file in Linux, which allows IP spoofing. Recommendations: For Linux versions prior to 2.0.36, consider updating to version 2.0.36 or later...
CVE-1999-0304
mmap function in BSD allows local attackers in the kmem group to modify memory through devices...
SunOS 4.1.3 - etccrash SetGID kmem Privilege Escalation
SunOS 4.1.3 - etccrash SetGID kmem Privilege Escalation source: https://www.securityfocus.com/bid/59/info /etc/crash was installed setgid kmem and excutable by anyone. Any user can use the ! shell command escape to executes commands, which are then performed with group set to kmem. $ /etc/crash !...
SunOS 4.1.3 - '/etc/crash' SetGID kmem Privilege Escalation
source: https://www.securityfocus.com/bid/59/info /etc/crash was installed setgid kmem and excutable by anyone. Any user can use the ! shell command escape to executes commands, which are then performed with group set to kmem. $ /etc/crash ! sh...