Solaris 7.0 - ufsdump Local Buffer Overflow (1)

Solaris 7.0 - ufsdump Local Buffer Overflow 1 // source: https://www.securityfocus.com/bid/680/info A buffer overflow vulnerability in the /usr/lib/fs/ufs/ufsdump setuid program allows local users to obtain root and tty group access. The vulnerability is the result of 'ufsdump' not being able to...

Solaris 7.0 - 'ufsdump' Local Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/680/info A buffer overflow vulnerability in the /usr/lib/fs/ufs/ufsdump setuid program allows local users to obtain root and tty group access. The vulnerability is the result of 'ufsdump' not being able to handle device names of a large length. /...

Microsoft Exchange Server 4.05.0 - SMTP HELO Argument Buffer Overflow

Microsoft Exchange Server 4.05.0 - SMTP HELO Argument Buffer Overflow // source: https://www.securityfocus.com/bid/8555/info It has been reported that Microsoft Exchange server is prone to an SMTP HELO command argument buffer overflow vulnerability. The issue presents itself likely due to...

Ipswitch Imail Server 5.0 - SMTP HELO Argument Buffer Overflow

// source: https://www.securityfocus.com/bid/8621/info It has been reported that Ipswitch IMail server is prone to an SMTP HELO command argument buffer overflow vulnerability. The issue presents itself likely due to insufficient bounds checking performed when handling malicious SMTP HELO command...

CVE-1999-0125

Buffer overflow in SGI IRIX mailx program...

Linux Kernel 2.02.0.33 - i_count Overflow (PoC)

Linux Kernel 2.02.0.33 - icount Overflow PoC / source: https://www.securityfocus.com/bid/388/info The icount member in the Linux inode structure is an unsigned short integer. It can be overflowed by mapping a single file too many times, allowing for a local user to possibly gain root access on th...

Solaris 2.4 passwd / yppasswd / nispasswd - Local Overflow

---------------------------- file newpass.c ------------------------------- include include define hiddenpasswd "/bin/hpasswd" /change here .../ define MAXLENGTH 32 void mainint argc, char argv int i; char args10; ifargc MAXLENGTH printf"You reached the maximum length in args\n"; exit0; else...

SGI IRIX 6.4 - Permissions Buffer Overflow

SGI IRIX 6.4 - Permissions Buffer Overflow // source: https://www.securityfocus.com/bid/417/info A buffer overrun exists in the permissions program, as shipped by Silicon Graphics with the 5.x and 6.x Irix operating system. By supplying a long, well crafted buffer as the 4th argument to the...

Solaris 2.5.1 - 'chkey' Local Privilege Escalation

/ source: https://www.securityfocus.com/bid/207/info The chkey program is used to change a users secure RPC Diffie-Hellman public key and secret key pair. A buffer overflow condition has been found in the chkey program. Since chkey has setuid root permissions, an unauthorized user may be able to...

CVE-1999-0041

Buffer overflow in NLS Natural Language Service...

BSDOS 2.1 DGUX 4.0 Debian 0.93 Digital UNIX 4.0 B FreeBSD 2.1.5 HP-UX 10.34 IBM AIX 4.1.5 NetBSD 1.01.1 NeXTstep 4.0 SGI IRIX 6.3 SunOS 4.1.4 - rlogin Local Privilege Escalation

BSDOS 2.1 DGUX 4.0 Debian 0.93 Digital UNIX 4.0 B FreeBSD 2.1.5 HP-UX 10.34 IBM AIX 4.1.5 NetBSD 1.01.1 NeXTstep 4.0 SGI IRIX 6.3 SunOS 4.1.4 - rlogin Local Privilege Escalation / source: https://www.securityfocus.com/bid/242/info The SUID rlogin program is used to establish remote sessions. A...

CVE-1999-0050

Buffer overflow in HP-UX newgrp program...

CVE-1999-0085

Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname...

Q311967: Security Update

This update resolves the "Unchecked buffer in the Multiple UNC Provider" security vulnerability in Windows XP, and is discussed in Microsoft Security Bulletin MS02-017. Download now to help prevent a malicious user from exploiting a buffer overflow vulnerability to either cause your computer to...