769 matches found
CVE-1999-0301
Buffer overflow in SunOS/Solaris ps command...
CVE-1999-0301
CVE-1999-0301 describes a buffer overflow in the SunOS/Solaris ps command. The connected sources confirm a local vulnerability in the ps utility that could allow a user to escalate privileges (impacting confidentiality, integrity, and availability) as indicated by the CVE record’s base metrics. T...
CVE-1999-0164
A race condition in the Solaris ps command allows an attacker to overwrite critical files...
CVE-1999-0301
Buffer overflow in SunOS/Solaris ps command...
Solaris 2.5.0/2.5.1 ps / chkey - Data Buffer
cat psexpl.po psexpl.c include include include define BUFLENGTH 632 define EXTRA 256 int mainint argc, char argv char bufBUFLENGTH + EXTRA; / ps will grok this file for the exploit code / char envp="NLSPATH=/tmp/foo",0; ulong longp; uchar charp; / This will vary depending on your libc / ulong...
Solaris 2.5.0/2.5.1 ps & chkey Data Buffer Exploit
Exploit for solaris platform in category local exploits ================================================== Solaris 2.5.0/2.5.1 ps & chkey Data Buffer Exploit ================================================== cat psexpl.po psexpl.c include include include define BUFLENGTH 632 define EXTRA 256 int...
SGI IRIX 6.5.4 / Solaris 2.5.1 - ps(1) Buffer Overflow
source: https://www.securityfocus.com/bid/220/info The ps command prints information about active processes on a system. Due to insufficient bounds checking on arguments supplied to ps, it is possible to overwrite the internal data space of the ps program. As ps is setuid root, this vulnerability...
SGI IRIX 6.5.4 Solaris 2.5.1 - ps(1) Buffer Overflow
SGI IRIX 6.5.4 Solaris 2.5.1 - ps1 Buffer Overflow source: https://www.securityfocus.com/bid/220/info The ps command prints information about active processes on a system. Due to insufficient bounds checking on arguments supplied to ps, it is possible to overwrite the internal data space of the p...