Low: Red Hat Security Advisory: rsh security update

Updated rsh packages that fix various bugs and a theoretical security issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team The rsh package contains a set of programs that allow users to run commands on remote machines, login to...

RHEL 3 : rsh (RHSA-2005:074)

Updated rsh packages that fix various bugs and a theoretical security issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team The rsh package contains a set of programs that allow users to run commands on remote machines, login to...

rsh security update

CentOS Errata and Security Advisory CESA-2005:074 Updated rsh packages that fix various bugs and a theoretical security issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team The rsh package contains a set of programs that allow use...

Low: Red Hat Security Advisory: rsh security update

Updated rsh packages that fix various bugs and a theoretical security issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team The rsh package contains a set of programs that allow users to run commands on remote machines, login to...

CVE-2003-0954

CVE-2003-0954 describes a buffer overflow in the remote copy protocol (rcp) on IBM AIX platforms (AIX 4.3.3, 5.1, 5.2) that allows local users to gain privileges. The root cause is a vulnerability in rcp leading to privilege escalation; affected component is rcp on the specified AIX versions. The...

CVE-2002-1621

Buffer overflow in the filecomp function in rcp for IBM AIX 4.3.x and 5.1 allows remote attackers to execute arbitrary code...

CVE-2002-1621

CVE-2002-1621 describes a buffer overflow in the file_comp function of rcp on IBM AIX 4.3.x and 5.1, allowing remote code execution. The vulnerability is tied to the rcp component and affects remote attack vectors with no authentication required, as indicated by the CVE description. No explicit r...

CVE-2002-1231

SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to cause a denial of service via an rcp call on /proc...

CVE-2002-1231

CVE-2002-1231 affects SCO UnixWare 7.1.1 and Open UNIX 8.0.0. A local user can trigger a denial of service by performing an rcp of /proc. Vulnerable binaries include /etc/conf/pack.d/fs/Driver_atup.o and Driver_mp.o. The advisory CSSA-2002-SCO.41 provides fixed packages: erg712112c.pkg.Z for Unix...

CVE-2003-0954

Buffer overflow in rcp for AIX 4.3.3, 5.1 and 5.2 allows local users to gain privileges...

CVE-2002-1231

SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to cause a denial of service via an rcp call on /proc...

solaris 9 sparc rcp

hallo, freshly installed solaris 9 sparc. one more suid segfault: bash-2.05$ uname -a SunOS solaris9 5.9 Generic sun4u sparc SUNW,Ultra-510 bash-2.05$ ls -l /usr/sbin/static/rcp -r-sr-xr-x 1 root bin 787700 Apr 6 16:58 /usr/sbin/static/rcp bash-2.05$ /usr/sbin/static/rcp perl -e 'print "A" x 1000...

CVE-1999-1467

Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, possibly related to the configuration of the nobody user...

CVE-1999-1299

rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, since 65535 is interpreted as -1 by chown and other system calls, which causes the calls to fail to modify the ownership of the file...

CVE-1999-1467

The CVE-1999-1467 issue affects the rcp service on SunOS 4.0.x. The underlying problem is tied to the configuration of the nobody user, enabling remote attackers from trusted hosts to execute arbitrary commands as root. The connected PT-1989-1001 entry confirms SunOS 4.0.x as the affected platfor...

CVE-1999-1299

CVE-1999-1299 concerns rcp on various Linux systems, including Red Hat 4.0. Root cause: UID 65535 is interpreted as -1 by chown and related system calls, causing ownership changes to fail and potentially allow a nobody or UID 65535 to overwrite arbitrary files. Impact: writable/overwritable files...

RedHat 6.2 usrbinrcp - SUID Local Privilege Escalation

RedHat 6.2 usrbinrcp - SUID Local Privilege Escalation !/usr/bin/perl -w exploits suid privledges on rcp Not really tested this but hey works on redhat6.2 not werk on freebsd4.1 stable bug discovered by Andrew Griffiths Exploit written by tlabs greetz to those that know me innit Please set your...

RedHat 6.2 /usr/bin/rcp - 'SUID' Local Privilege Escalation

!/usr/bin/perl -w exploits suid privledges on rcp Not really tested this but hey works on redhat6.2 not werk on freebsd4.1 stable bug discovered by Andrew Griffiths Exploit written by tlabs greetz to those that know me innit Please set your rcpfile this can be found by doing ls -alF which rcp hav...

Дырка в rcp (unparsed shell characters) в linux

Некорректный разбор метасимволов...

Re: possible bug in rcp...

On Wed, Nov 22, 2000 at 09:11:20AM +1100, Andrew Griffiths wrote: Here is a possible bug in rcp; since I think it calls system. I haven't had much time to play with this, because exama are coming up. It is negated because system calls /bin/cp which with the newer versions of bash, it drops it's...