CVE-2001-0526

Buffer overflow in the Xview library as used by mailtool in Solaris 8 and earlier allows a local attacker to gain privileges via the OPENWINHOME environment variable...

Solaris 2.6/7/8 (SPARC) - xlock Heap Overflow

// source: https://www.securityfocus.com/bid/3160/info Xlock is a utility for locking X-windows displays. It is installed setuid root because it uses the user's password to authorize access to the display when it is locked. The version of xlock that ships with Solaris as part of OpenWindows...

CVE-2001-0595

Buffer overflow in the kcsSUNWIOsolf.so library in Solaris 7 and 8 allows local attackers to execute arbitrary commands via the KCMSPROFILES environment variable, e.g. as demonstrated using the kcmsconfigure program...

CVE-2001-0587

The CVE-2001-0587 issue affects MMDF 2.43.3b on SCO OpenServer 5.0.6, where a buffer overflow in the first argument to the mail command allows a local attacker to gain additional privileges. Affected software: MMDF mail delivery program on SCO OpenServer 5.0.6. Root cause: buffer overflow in inpu...

CVE-2001-0577

CVE-2001-0577 concerns a local-privilege escalation in SCO OpenServer 5.0–5.0.6, where a buffer overflow in the first command-line argument can allow a local attacker to gain additional privileges. The affected software is SCO OpenServer 5.0 through 5.0.6; the underlying cause is a buffer overflo...

CVE-2001-0576

The CVE-2001-0576 entry describes a local privilege escalation in SCO OpenServer 5.0–5.0.6 via a buffer overflow in the lpusers helper when processing the -u parameter. The vulnerability allows a local attacker to gain additional privileges. The primary sources here confirm the affected product (...

CVE-2001-0570

CVE-2001-0570 affects minicom 1.83.1 and earlier. The root cause is format-string handling allowing a local attacker to gain additional privileges (local, low complexity, no authentication). The impact is privilege escalation with complete confidentiality, integrity, and availability concerns as ...

CVE-2001-0610

CVE-2001-0610 affects KDE’s KFM (KDE File Manager) when used with KDE 1.x. A local attacker can exploit a symlink attack in KFM’s per-user cache directory under /tmp, where the directory is created without proper ownership checks or existence verification. This insecure handling enables potential...

CVE-2001-0568

CVE-2001-0568 affects Digital Creations Zope 2.3.1 b1 and earlier. A local attacker with through-the-web scripting capabilities can modify ZClasses class attributes, enabling possible unauthorized changes within the Zope instance. The vulnerability is documented in multiple advisories (Zope hotfi...

CVE-2001-0607

CVE-2001-0607 affects HP-UX 10.01–11.00 where the asecure program can be exploited by local attackers due to unsafe permissions on the asecure file, enabling denial of service and privilege escalation. The underlying issue is improper file permissions on the asecure component, allowing a local at...

2.4.x/Slackware Init script vulnerability

I posted this to the linux kernel mailing last Friday, July 13th 2001: Submitted by : Josh [email protected], lockdown [email protected] on July 16th, 2001 Vulnerability : /lib/modules/2.4.5/modules.dep Tested On : Slackware 8.0. 2.4.5 Local : Yes Remote : No Temporary Fix : umask 022 at...

Solaris 8 libsldap - Local Buffer Overflow (2)

Solaris 8 libsldap - Local Buffer Overflow 2 // source: https://www.securityfocus.com/bid/2931/info Solaris 8 ships with a shared library that implements LDAP functionality called 'libsldap'. This library is linked to by a number of system utilities, many of them installed setuid or setgid...

Solaris 8 libsldap - Local Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/2931/info Solaris 8 ships with a shared library that implements LDAP functionality called 'libsldap'. This library is linked to by a number of system utilities, many of them installed setuid or setgid. Libsldap contains a buffer overflow vulnerability ...

Solaris 8 libsldap - Local Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/2931/info Solaris 8 ships with a shared library that implements LDAP functionality called 'libsldap'. This library is linked to by a number of system utilities, many of them installed setuid or setgid. Libsldap contains a buffer overflow vulnerability ...

CVE-2001-0259

ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES-1 magic phrase generated by another user, which the attacker can use to decrypt that user's private key file...

CVE-2001-0369

The CVE-2001-0369 entry describes a buffer overflow in the DGUX lpsched service on versions R4.20MU06 and MU02. The vulnerability allows a local attacker to gain root privileges by supplying a long command line argument (an non-existent printer name). The available documents confirm the affected ...

CVE-2001-0458

Multiple buffer overflows in ePerl before 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands...

CVE-2001-0458

CVE-2001-0458 : Multiple buffer overflows in ePerl prior to 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands. Mandrake and Debian advisories note upgrades to 2.2.14-0.7 (or later) fix the issue; other references corroborate the vulnerability in ePerl.

CVE-2001-0141

CVE-2001-0141 affects mgetty: multiple sources confirm insecure temporary-file handling that allows local users to overwrite arbitrary files via a symlink attack in certain configurations. Vulnerable until versions before 1.1.24 (Mandrake/MDKSA-2001:009; Debian DSA-011-2 notes patch in 1.1.21-3po...

CVE-2001-0259

The connected sources confirm a vulnerability in SSH Communications Security SSH versions 1.2.27–1.2.30 when Secure-RPC is enabled. A local attacker can cause the system to recover the SUN-DES-1 magic phrase generated for another user, which can then decrypt that user’s private key file. This wea...