Digital Unix msgchk vulnerable to file contents disclosure via symlink redirection of profile

Overview msgchk, a part of the MH mail system, reads the user's .mhprofile in order to obtain configuration options. If the .mhprofile is linked to another file with illegal format, the first line of that file will be displayed in an error message by msgchk. Description msgchk is the portion of t...

RedHat Linux 5.0 - msgchk Local Privilege Escalation

RedHat Linux 5.0 - msgchk Local Privilege Escalation // source: https://www.securityfocus.com/bid/383/info // // Similar to the mh vulnerability, a buffer overflow exists in the version of msgchk shipped with RedHat Linux 5.0. The vulnerability allows a user to execute arbritrary commands as root...

RedHat Linux 5.0 - 'msgchk' Local Privilege Escalation

// source: https://www.securityfocus.com/bid/383/info // // Similar to the mh vulnerability, a buffer overflow exists in the version of msgchk shipped with RedHat Linux 5.0. The vulnerability allows a user to execute arbritrary commands as root to compromise superuser access. // include define...