Re: possible bug in rcp...

On Wed, Nov 22, 2000 at 09:11:20AM +1100, Andrew Griffiths wrote: Here is a possible bug in rcp; since I think it calls system. I haven't had much time to play with this, because exama are coming up. It is negated because system calls /bin/cp which with the newer versions of bash, it drops it's...

CVE-1999-0767

CVE-1999-0767 is a buffer overflow vulnerability described in Solaris components (libc, ufsrestore, and rcp) triggered via the LC_MESSAGES environment variable. The available connected records confirm the affected software and the root cause (buffer overflow), with the PT-1999-1338 entry reiterat...

CVE-1999-0090

CVE-1999-0090 describes a buffer overflow in the AIX rcp command that allows local users to obtain root access. The data across connected documents confirms the affected component is the AIX rcp utility, with the root-privilege impact stated as local, due to a buffer overflow vulnerability. There...

CVE-1999-0090

Buffer overflow in AIX rcp command allows local users to obtain root access...

CVE-1999-0767

Buffer overflow in Solaris libc, ufsrestore, and rcp via LCMESSAGES environmental variable...

PT-1999-1338 · Oracle · Solaris

Name of the Vulnerable Software and Affected Versions: Solaris affected versions not specified Description: The issue is related to a buffer overflow in Solaris libc, ufsrestore, and rcp, which can be triggered via the LC MESSAGES environmental variable. Recommendations: At the moment, there is n...

nt.rsh.rcp.txt

Date: Thu, 8 Apr 1999 19:11:54 -0700 From: Eric Gisin To: [email protected] Subject: rsh/rcp is not secure This is really a UNIX rshd bug, but it affects users of the NT clients. It's old news that the BSD rsh/rcp services are not secure, however rshd is still is enabled in many UN...

CVE-1999-0090

Buffer overflow in AIX rcp command allows local users to obtain root access...

PT-1997-1044 · Ibm · Aix

Name of the Vulnerable Software and Affected Versions: AIX affected versions not specified Description: A buffer overflow issue in the rcp command of AIX allows local users to gain root access. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

CVE-1999-1467

Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, possibly related to the configuration of the nobody user...