QNX RTOS 4.25 - monitor Arbitrary File Modification

source: https://www.securityfocus.com/bid/4902/info The QNX RTOS monitor utility is prone to an issue which may allow local attackers to modify arbitrary system files such as /etc/passwd. monitor is installed setuid root by default. The monitor -f command line option may be used by a local attack...

CVE-2002-0204

Buffer overflow in GNU Chess gnuchess 5.02 and earlier, if modified or used in a networked capacity contrary to its own design as a single-user application, may allow local or remote attackers to execute arbitrary code via a long command...

Computer Associates MLink "mllock" command vulnerable to buffer overflow via long string of characters

Overview A locally exploitable buffer overflow exists in mllock. Description CA-MLINK is a managed data transport service. For more information about CA-MLINK, please see the product brochure. Based on a public report, it appears there is a locally exploitable buffer overflow in the mllock comman...

CVE-2001-1243

Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service crash via 1 creating an ASP program that uses Scripting.FileSystemObject to open a file with an MS-DOS device name, or 2 remotely injecting the device name into ASP...

CVE-2002-0272

The CVE-2002-0272 issue affects mpg321 before 0.2.9, with a buffer overflow in the network streaming code. A long URL can be crafted via (1) a command line option, (2) an HTTP request, or (3) an FTP request to trigger arbitrary code execution. The vulnerability is exploitable locally or remotely ...

CVE-2002-0279

CVE-2002-0279 affects HP-UX 11.11 on HP 9000 servers, where the kernel incorrectly supplies arguments to setrlimit. This could let a local attacker cause a kernel panic (DoS) and potentially gain privileges. HP’s security bulletin #0183 recommends applying patch PHKL_26233 (and reboot) for affect...

IRIX /dev/ipfilter Denial of Service vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: /dev/ipfilter Denial of Service vulnerability Number: 20020408-01-I Date: April 30, 2002 Reference: CAN-2002-0172 - ----------------------- - --- Issue Specifics --- - ----------------------- SGI has determined that the default...

CVE-2002-0041

CVE-2002-0041 affects SGI Mail for IRIX 6.5 through 6.5.15f (and possibly earlier) and is triggered when the -R option is used, allowing local and remote attackers to cause a core dump. The available sources identify the affected software as Mail for SGI IRIX and describe the vulnerability as a f...

Immunity Canvas: CACHEFSD_LPD

Name| cachefsdlpd ---|--- CVE| CVE-2002-0084 Exploit Pack| CANVAS Description| cachefsd .cfsmnt File Stack Overflow Notes| References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309 CVE Name: CVE-2002-0084 VENDOR: Sun Development Notes: This vulnerability had been marked only as ...

CVE-2001-1148

CVE-2001-1148: Multiple buffer overflows in SCO OpenServer 5.0.6a and earlier allow local users to gain privileges via a long TERM environment variable to (atcronsh, auditsh, authsh, backupsh, lpsh, sysadm.menu, or termsh); affected software is SCO OpenServer components used by scoadmin/sysadmsh....

CVE-2001-0586

Affected software: Trend Micro ScanMail for Exchange 3.5 Evaluation. Vulnerability: local attacker can recover administrative credentials by exploiting unprotected registry keys and weakly encrypted passwords. Root cause: insecure credential storage in registry and weak encryption. Impact: potent...

CVE-2001-0567

The CVE concerns Zope 2.3.2 and earlier, where a local attacker can gain additional privileges by altering ZClass permission mappings for objects and methods within a ZClass. Public sources in connected documents corroborate that the vulnerability is tied to Zope’s ZClass permission mappings and ...

CVE-2001-0559

The CVE-2001-0559 issue affects Vixie cron up to 3.0.1. crontab fails to drop privileges correctly after a failed parsing of a modification operation, potentially enabling a local attacker to gain additional privileges when an editor is invoked to fix the error. Publicly documented references (De...

CVE-2001-0594

kcmsconfigure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overflow in a command line argument...

CVE-2001-0565

CVE-2001-0565 affects Solaris mailx (/usr/bin/mailx). A buffer overflow via a long -F option could let a local attacker gain privileges (mail group). Public sources confirm impact is local privilege escalation. Remediation: Solaris update 110957-02 is available (OpenVAS entries). CERT/US-CERT gui...

CVE-2001-0628

Summary : CVE-2001-0628 affects Microsoft Word 2000. The issue: Word 2000 does not check AutoRecovery (.asd) files for macros, allowing a local attacker to execute arbitrary macros with the Word user’s ID. What’s affected : Word 2000; vulnerability details describe macro execution via unverified ...

CVE-2001-0682

ZoneAlarm and ZoneAlarm Pro are affected by a local denial-of-service vulnerability wherein running a trojan can initialize a ZoneAlarm mutex object, preventing ZoneAlarm from starting. Affected product: ZoneAlarm / ZoneAlarm Pro (exact versions not specified in available sources).Root cause: ini...

CVE-2001-0547

CVE-2001-0547 describes a memory leak in the proxy service of Microsoft Internet Security and Acceleration (ISA) Server 2000 that allows local attackers to cause a denial of service through resource exhaustion. The affected product is ISA Server 2000 (proxy service component); the underlying caus...

CVE-2001-0595

The CVE-2001-0595 issue affects Sun’s KCMS component on Solaris 7/8, where a buffer overflow in the kcsSUNWIOsolf.so library allows a local user to execute arbitrary commands via the KCMS_PROFILES environment variable (demonstrated by kcms_configure). OpenVAS entries describe the KCMS Profile Ser...

CVE-1999-1507

Sun SunOS 4.1 through 4.1.3 allows local attackers to gain root access via insecure permissions on files and directories such as crash...