208 matches found
Solaris 2.52.67.08 - mailx -F Local Buffer Overflow (1)
Solaris 2.52.67.08 - mailx -F Local Buffer Overflow 1 // source: https://www.securityfocus.com/bid/2610/info Solaris is the variant of the UNIX Operating System distributed by Sun Microsystems. Solaris is designed as a scalable operating system for the Intel x86 and Sun Sparc platforms, and...
[SECURITY] [DSA-044-1] mailx local exploit
Package : mailx Problem type : buffer overflow Debian-specific: no The mail program a simple tool to read and send email as distributed with Debian GNU/Linux 2.2 has a buffer overflow in the input parsing code. Since mail is installed setgid mail by default this allowed local users to use it to...
Solaris 2.6 7 8 - Lock Users Out of mailx
Solaris 2.6 7 8 - Lock Users Out of mailx !/bin/sh Solaris mailx1 username.lock proof of theory makes mailx not work for all users except those that can erase the lockfile even so mailx will hang for a long time. Tested on Solaris 2.6, 7, 8 by Optyx http://www.uberhax0r.net echo "mailx-lock by...
Solaris 2.6 / 7 / 8 - Lock Users Out of mailx
!/bin/sh Solaris mailx1 username.lock proof of theory makes mailx not work for all users except those that can erase the lockfile even so mailx will hang for a long time. Tested on Solaris 2.6, 7, 8 by Optyx http://www.uberhax0r.net echo "mailx-lock by optyx. http://www.uberhax0r.net" for x in ca...
Solaris 2.6 / 7 / 8 Lock Users Out of mailx Exploit
Exploit for solaris platform in category dos / poc =================================================== Solaris 2.6 / 7 / 8 Lock Users Out of mailx Exploit =================================================== !/bin/sh Solaris mailx1 username.lock proof of theory makes mailx not work for all users...
[SECURITY] New version of mailx released
Package : mailx Problem type : local exploit Debian-specific: no mailx is a often used by other programs to send email. Unfortunately mailx as distributed in Debian GNU/Linux 2.1 has some features that made it possible to execute system commands if a user can trick a privileged program to send...
[SECURITY] New version of mailx released
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman August 8, 2000 - ------------------------------------------------------------------------ Package : mailx Problem type : local...
CVE-2000-0545
Buffer overflow in mailx mail command aka Mail on Linux systems allows local users to gain privileges via a long -c carbon copy parameter...
[SECURITY] New version of mailx released
Package: mailx Vulnerability: local exploit Debian-specific: no The version of mailx distributed in Debian GNU/Linux 2.1 a.k.a. slink, as well as in the frozen potato and unstable woody distributions is vulnerable to a local buffer overflow while sending messages. This could be exploited to give ...
[SECURITY] New version of mailx released
---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz June 5, 2000 - ---------------------------------------------------------------------------- Package: mailx Vulnerability:...
BSD mailx 8.1.1-10 - Local Buffer Overflow (1)
BSD mailx 8.1.1-10 - Local Buffer Overflow 1 // source: https://www.securityfocus.com/bid/1305/info Some Linux distributions ship with BSD mailx 8.1.1-10 On Slackware 7.x it can be found as /usr/bin/Mail. A vulnerability exists in the 'mail' program, part of the Berkeley mailx package. The 'mail'...
BSD 'mailx' 8.1.1-10 - Local Buffer Overflow (1)
// source: https://www.securityfocus.com/bid/1305/info Some Linux distributions ship with BSD mailx 8.1.1-10 On Slackware 7.x it can be found as /usr/bin/Mail. A vulnerability exists in the 'mail' program, part of the Berkeley mailx package. The 'mail' program contains a buffer overflow condition...
Переполнение буфера в mailx
Переполнение буфера в обработке параметра -c дает возможность получить привилегии группы mail в системах, где mail установлен с sgid...
CVE-1999-0123
CVE-1999-0123 describes a race condition in the Linux mailx command that allows local users to read user files. The consensus across connected records confirms impact is local escalation via the mailx utility; specific affected versions, root cause details, and exact remediation are not consisten...
CVE-1999-0123
Race condition in Linux mailx command allows local users to read user files...
CVE-1999-0125
CVE-1999-0125 describes a local buffer overflow in the SGI IRIX mailx program. The vulnerability affects the mailx component of SGI IRIX; the root cause is a buffer overflow that can impact confidentiality, integrity and availability (partial impacts) when an attacker with local access and no aut...
CVE-1999-0125
Buffer overflow in SGI IRIX mailx program...
mailx 8.1.1-10 (BSDSlackware) - Local Buffer Overflow (2)
mailx 8.1.1-10 BSDSlackware - Local Buffer Overflow 2 / source: https://www.securityfocus.com/bid/1305/info Some Linux distributions ship with BSD mailx 8.1.1-10 On Slackware 7.x it can be found as /usr/bin/Mail. A vulnerability exists in the 'mail' program, part of the Berkeley mailx package. Th...
mailx 8.1.1-10 (BSD/Slackware) - Local Buffer Overflow (2)
/ source: https://www.securityfocus.com/bid/1305/info Some Linux distributions ship with BSD mailx 8.1.1-10 On Slackware 7.x it can be found as /usr/bin/Mail. A vulnerability exists in the 'mail' program, part of the Berkeley mailx package. The 'mail' program contains a buffer overflow condition...
RedHat Linux 4.2 SGI IRIX 6.3 Solaris 2.6 - mailx (2)
RedHat Linux 4.2 SGI IRIX 6.3 Solaris 2.6 - mailx 2 // source: https://www.securityfocus.com/bid/393/info A buffer overrun exists in the /bin/mailx program. This program was originally developed as part of BSD, and is available on many Unix systems. By supplying a long, well crafted buffer as the...