Buffer-overflow vulnerability in Midnight Commander

Overview The mcedit component of some versions of Midnight Commander contains a buffer-overflow vulnerability. Description Midnight Commander is a file manager for open source operating systems, distributed under the GNU General Public License GPL. In version 4.5.1 of Midnight Commander, the mced...

CVE-2001-0961

Buffer overflow in tab expansion capability of the most program allows local or remote attackers to execute arbitrary code via a malformed file that is viewed with most...

QNX RTOS 4.25/6.1 - 'phgrafx-startup' Local Privilege Escalation

source: https://www.securityfocus.com/bid/4916/info The QNX phgrafx-startup utility is prone to an issue which may make it possible for local attackers to escalate privileges. This issue is due to unsafe use of the system function to invoke other programs. This vulnerability may be trivially...

CVE-2002-0272

Buffer overflows in mpg321 before 0.2.9 allows local and possibly remote attackers to execute arbitrary code via a long URL to 1 a command line option, 2 an HTTP request, or 3 an FTP request...

QNX RTOS 4.25 - monitor Arbitrary File Modification

QNX RTOS 4.25 - monitor Arbitrary File Modification source: https://www.securityfocus.com/bid/4902/info The QNX RTOS monitor utility is prone to an issue which may allow local attackers to modify arbitrary system files such as /etc/passwd. monitor is installed setuid root by default. The monitor ...

QNX RTOS 4.25 - dumper Arbitrary File Modification

source: https://www.securityfocus.com/bid/4904/info When creating memory dump files, the QNX RTOS debugging utility 'dumper' follows symbolic links. It also sets ownership of the file to the userid of the terminated process. It is possible for malicious local attackers to exploit this vulnerabili...

CVE-2002-0279

The kernel in HP-UX 11.11 does not properly provide arguments for setrlimit, which could allow local attackers to cause a denial of service kernel panic and possibly gain privileges...

CVE-2002-0311

CVE-2002-0311 describes a vulnerability in WebTop on UnixWare 7.1.1 and Open UNIX 8.0.0 where local and possibly remote attackers can gain root privileges by supplying shell metacharacters in the -c argument of the CGI scripts scoadminreg.cgi or service_action.cgi. The affected components are the...

eSecurityOnline Security Advisory 2406 - CDE dtprintinfo Help sea rch buffer overflow vulnerability

eSO Security Advisory: 2406 Discovery Date: March 31, 2000 ID: eSO:2406 Title: CDE dtprintinfo Help search buffer overflow vulnerability Impact: Local attackers can gain root level access Affected Technology: Solaris 2.4, 2.5, 2.5.1, 2.6, 7, 8 SPARC and x86 HP-UX 10.10, 10.20, 10.24, 11.00, 11.04...

eSecurityOnline Security Advisory 4123 - Sun Solaris admintool me dia installation path buffer overflow vulnerability

eSO Security Advisory: 4123 Discovery Date: October 15, 2001 ID: eSO:4123 Title: Sun Solaris admintool media installation path buffer overflow vulnerability Impact: Local attackers can gain root privileges Affected Technology: Sun Solaris 2.6,7,8 SPARC and x86 Vendor Status: Vendor notified...

eSecurityOnline Security Advisory 3761 - Sun Solaris lbxproxy display name buffer overflow vulnerability

eSO Security Advisory: 3761 Discovery Date: July 5, 2001 ID: eSO:3761 Title: Sun Solaris lbxproxy display name buffer overflow vulnerability Impact: Local attackers can gain group root privileges Affected Technology: Sun Solaris 8 x86 Vendor Status: Vendor notified Discovered By: Kevin Kotas of t...

eSecurityOnline Security Advisory 4198 - Sun Solaris cachefsd mou nt file buffer overflow vulnerability

eSO Security Advisory: 4198 Discovery Date: October 29, 2001 ID: eSO:4198 Title: Sun Solaris cachefsd mount file buffer overflow vulnerability Impact: Local attackers can gain root privileges Affected Technology: Solaris 2.6, 7, 8 SPARC and x86 Vendor Status: Vendor notified Discovered By: Kevin...

CVE-2001-0594

CVE-2001-0594 affects Solaris 7/8 where kcms_configure is vulnerable to a local privilege escalation caused by a buffer overflow in a command line argument. Root cause: buffer overflow in kcms_configure. Impact: partial confidentiality, integrity, and availability (per NVD). Remediation: apply So...

CVE-1999-1507

Technical details for CVE-1999-1507 are not publicly available in the provided documents; monitor for updates.

CVE-1999-1048

Buffer overflow in bash 2.0.0, 1.4.17, and other versions allows local attackers to gain privileges by creating an extremely large directory name, which is inserted into the password prompt via the \w option in the PS1 environmental variable when another user changes into that directory...

CVE-1999-1494

The CVE-1999-1494 entry concerns Silicon Graphics IRIX colorview on versions 5.1, 5.2, and 6.0. The vulnerability condition is local; an attacker can read arbitrary files by abusing the -text argument. The description does not provide affected product families beyond IRIX colorview, nor does it s...

CVE-1999-1048

CVE-1999-1048 affects Bash versions including 2.0.0 and 1.4.17, where a buffer overflow can be triggered by an extremely large directory name. The vulnerability is exploited via the PS1 prompt (\w) when another user changes into that directory, enabling local privilege escalation. The provided do...

CVE-2001-0741

Cisco Hot Standby Routing Protocol HSRP allows local attackers to cause a denial of service by spoofing HSRP packets...

Cisco PIX Firewall Manager stores enable password in plain text

Overview A vulnerability exists in the way the Cisco Pix Firewall Manager stores authentication credentials which could allow local attackers to have read access to the enable password for the Cisco Pix Firewall. Description The PIX Firewall Manager PFM is a software package designed to allow...

IBM AIX nslookup fails to drop root privileges

Overview The nslookup command fails to drop privileges, allowing local attackers to gain root privileges. Description The nslookup program fails to drop the privileges it gains from being setuid. This access appears to be needed to read the "/etc/resolv.conf" file. This problem was described in I...