1250 matches found
CVE-2001-0426: Undefined Security Weakness
Buffer overflow in dtsession on Solaris, and possibly other operating systems, allows local users to gain privileges via a long LANG environmental variable...
SGI IRIX 6.5 Solaris 7.08 CDE - usrdtbindtsession Local Buffer Overflow
SGI IRIX 6.5 Solaris 7.08 CDE - usrdtbindtsession Local Buffer Overflow / source: https://www.securityfocus.com/bid/2603/info The CDE Session Manager 'dtsession' is vulnerable to a buffer overflow that could yield root privileges to an attacker. The bug exists in dtsession's LANG environment...
SGI IRIX 6.5 / Solaris 7.0/8 CDE - '/usr/dt/bin/dtsession' Local Buffer Overflow
/ source: https://www.securityfocus.com/bid/2603/info The CDE Session Manager 'dtsession' is vulnerable to a buffer overflow that could yield root privileges to an attacker. The bug exists in dtsession's LANG environment variable parser. If an overly long LANG variable is set and dtsession is...
CVE-2000-1013
The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable...
CVE-2000-1013: Undefined Security Weakness
The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable...
CVE-2000-1012
FreeBSD 5.0 and earlier are affected by CVE-2000-1012 due to the catopen function reading files via the LANG environment variable. Local users can read arbitrary files, yielding complete confidentiality and integrity impacts as described in the NVD entry (AV:L/AC:L/Au:N/C:C/I:C/A:C). The vulnerab...
CVE-2000-1013
The CVE-2000-1013 entry describes a local file read vulnerability in setlocale affecting FreeBSD/5.0 and earlier (and possibly other OSes), where an attacker can read arbitrary files via the LANG environment variable. The NVD entry lists a base CVSS v2 score of 7.2 (HIGH) with local access, low a...
CVE-2000-1012: Undefined Security Weakness
The catopen function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable...
