solaris-lpstat-bof.txt

Date: Wed, 27 Jan 1999 16:53:51 +0100 From: Anthony C . Zboralski To: [email protected] Subject: HERT Advisory 001 Buffer overflow in Solaris /usr/bin/lpstat -----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------- HERT - Hacker Emergency Response Team...

rxvt.sh

There is a major security hole in rxvt, a terminal emulator for X, when it is run on systems suid root, as is required on many configurations in order to write to the utmp file. It is obvious from the code that this program was not written to be run suid root, its a pity that sysadmins that insta...

AIX 4.1/4.2 - 'pdnsd' Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/3237/info The Source Code Browser's Program Database Name Server Daemon pdnsd component of the C Set ++ compiler for AIX contains a remotely exploitable buffer overflow. This vulnerability allows local or remote attackers to compromise root privileges ...

CVE-1999-0420

umapfs allows local users to gain root privileges by changing their uid through a malicious mountumap program...

PT-1999-1091 · Digital · Digital Unix

Name of the Vulnerable Software and Affected Versions: Digital Unix affected versions not specified Description: The issue is related to a buffer overflow in the Digital Unix Networker program nsralist, which allows local users to obtain root privilege. Recommendations: At the moment, there is no...

CVE-1999-0405

A buffer overflow in lsof allows local users to obtain root privilege...

BNC 2.2.42.4.62.4.8 - IRC Proxy Buffer Overflow (1)

BNC 2.2.42.4.62.4.8 - IRC Proxy Buffer Overflow 1 / source: https://www.securityfocus.com/bid/1927/info BNC's IRC Proxy is used as a gateway to an IRC server. A buffer stores a username which arguments the program's USER command. User-supplied input to this buffer is improperly checked for length...

BNC 2.2.4/2.4.6/2.4.8 - IRC Proxy Buffer Overflow (1)

/ source: https://www.securityfocus.com/bid/1927/info BNC's IRC Proxy is used as a gateway to an IRC server. A buffer stores a username which arguments the program's USER command. User-supplied input to this buffer is improperly checked for length. As a result, the excessive data copied onto the...

BNC 2.2.42.4.62.4.8 - IRC Proxy Buffer Overflow (2)

BNC 2.2.42.4.62.4.8 - IRC Proxy Buffer Overflow 2 / source: https://www.securityfocus.com/bid/1927/info BNC's IRC Proxy is used as a gateway to an IRC server. A buffer stores a username which arguments the program's USER command. User-supplied input to this buffer is improperly checked for length...

BNC 2.2.4/2.4.6/2.4.8 - IRC Proxy Buffer Overflow (2)

/ source: https://www.securityfocus.com/bid/1927/info BNC's IRC Proxy is used as a gateway to an IRC server. A buffer stores a username which arguments the program's USER command. User-supplied input to this buffer is improperly checked for length. As a result, the excessive data copied onto the...

Netscape Messaging Server 3.55 University of Washington imapd 10.234 - Remote Buffer Overflow

Netscape Messaging Server 3.55 University of Washington imapd 10.234 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/130/info A vulnerability exists in certain imapd implementations that allow an attacker to execute arbitrary code remotely. In certain instances, the code to ...

Netscape Messaging Server 3.55 & University of Washington imapd 10.234 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/130/info A vulnerability exists in certain imapd implementations that allow an attacker to execute arbitrary code remotely. In certain instances, the code to be executed will be run with root privilege. Imap supports a command 'AUTHENTICATE' which...

FreeBSD-SA-97:04.procfs

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-97:04 Security Advisory FreeBSD, Inc. Topic: security compromise via procfs Category: core Module: procfs Announced: 1997-08-19 Affects: FreeBSD 2.1., FreeBSD 2.2.,...

SGI IRIX 5.36.2 - ordist Local Privilege Escalation

SGI IRIX 5.36.2 - ordist Local Privilege Escalation // source: https://www.securityfocus.com/bid/415/info A buffer overflow exists in the ordist program, as shipped with Irix 6.x and 5.x from Silicon Graphics. By supplying long arguments to the '-d' option, containing a properly crafted buffer of...

SGI IRIX 6.2 - 'fsdump' Local Privilege Escalation

source: https://www.securityfocus.com/bid/355/info A number of vulnerabilities exist in the fsdump program included with Silicon Graphics Inc's IRIX operating system. Each of these holes can be used to obtain root privlilege. Variant 1: irix% /var/rfindd/fsdump -L/etc/passwd -F/tmp/dump / count t...

SGI IRIX 6.2 - fsdump Local Privilege Escalation

SGI IRIX 6.2 - fsdump Local Privilege Escalation source: https://www.securityfocus.com/bid/355/info A number of vulnerabilities exist in the fsdump program included with Silicon Graphics Inc's IRIX operating system. Each of these holes can be used to obtain root privlilege. Variant 1: irix%...