NSFOCUS SA2003-03: Solaris dtsession Heap Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NSFOCUS Security AdvisorySA2003-03 Topic: Solaris dtsession Heap Buffer Overflow Vulnerability Release Date: 2003-03-31 CVE CAN ID: CAN-2003-0092 Affected system: =================== Sun Solaris 2.5.1 SPARC/x86 Sun Solaris 2.6 SPARC/x86 Sun Solaris 7...

CVE-2003-0091: Undefined Security Weakness

Stack-based buffer overflow in the bsdqueue function for lpq on Solaris 2.6 and 7 allows local users to gain root privilege...

Traceroute-nanog 6 - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/6166/info A vulnerability has been discovered in Traceroute-nanog. It has been reported that Traceroute-nanog contains a buffer overflow condition. The overflow occurs in the 'getorigin' function in the 'traceroute.c' file. Due to insufficient bounds...

iDEFENSE Security Advisory 11.08.02b: Non-Explicit Path Vulnerability in QNX Neutrino RTOS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 11.08.02b: http://www.idefense.com/advisory/11.08.02b.txt Non-Explicit Path Vulnerability in QNX Neutrino RTOS November 8, 2002 I. BACKGROUND QNX Software Systems Ltd.'s Neutrino RTOS QNX is a real-time operating system...

Security Update: [CSSA-2002-SCO.27] UnixWare 7.1.1 Open UNIX 8.0.0 : ppptalk root privilege vulnerability

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: UnixWare 7.1.1 Open UNIX 8.0.0 : ppptalk root privilege vulnerability Advisory number: CSSA-2002-SCO.27 Issue date: 2002 June 18 Cross reference: 1. Problem...

IBM Informix SE 7.25 sqlexec - Local Buffer Overflow (2)

IBM Informix SE 7.25 sqlexec - Local Buffer Overflow 2 source: https://www.securityfocus.com/bid/4891/info Informix is an enterprise database distributed and maintained by IBM. A buffer overflow vulnerability has been reported for Informix-SE for Linux. The overflow is due to an unbounded string...

IBM Informix SE 7.25 sqlexec - Local Buffer Overflow (1)

IBM Informix SE 7.25 sqlexec - Local Buffer Overflow 1 // source: https://www.securityfocus.com/bid/4891/info Informix is an enterprise database distributed and maintained by IBM. A buffer overflow vulnerability has been reported for Informix-SE for Linux. The overflow is due to an unbounded stri...

CVE-2002-0356

Vulnerability in XFS filesystem reorganizer fsrxfs in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files...

CVE-1999-1160

Technical details about CVE-1999-1160 are not publicly available in the provided documents. Monitor for updates.

CVE-2001-0533

The CVE-2001-0533 issue affects IBM AIX 4.3.x and 5.1 where the libi18n library is vulnerable to a buffer overflow triggered by a crafted LANG environment value. Local users could gain root privileges when running setuid programs (e.g., aixterm). IBM’s advisory describes temporary fixes (libi18n_...

Cobalt RaQ 2.03.04.0 XTR - MultiFileUpload.php Authentication Bypass (1)

Cobalt RaQ 2.03.04.0 XTR - MultiFileUpload.php Authentication Bypass 1 source: https://www.securityfocus.com/bid/4252/info Cobalt RaQ is a server appliance for Internet-based services. It is distributed and maintained by Sun Microsystems. The 'MultiFileUpload.php' script is not sufficiently...

Cobalt RaQ 2.03.04.0 XTR - MultiFileUpload.php Authentication Bypass (2)

Cobalt RaQ 2.03.04.0 XTR - MultiFileUpload.php Authentication Bypass 2 source: https://www.securityfocus.com/bid/4252/info Cobalt RaQ is a server appliance for Internet-based services. It is distributed and maintained by Sun Microsystems. The 'MultiFileUpload.php' script is not sufficiently...

sastcpd Buffer Overflow and Format String Vulnerabilities

---------------------------------------------------------- sastcpd Buffer Overflow and Format String Vulnerabilities Ministry-of-Peace - www.ministryofpeace.co.uk ---------------------------------------------------------- SYNOPSIS "SAS software provides the foundation, tools, and solutions for da...

CVE-2001-0671

Buffer overflows in 1 sendstatus, 2 killprint, and 3 chkfhost in lpd in AIX 4.3 and 5.1 allow remote attackers to gain root privileges...

Flaws in recent Linux kernels

Hello, There are two bugs present in Linux kernels 2.2.x, x=19 and 2.4.y, y=9. The first vulnerability results in local DoS. The second one, involving ptrace, can be used to gain root privileges locally in case of default install of most popular distributions. Linux 2.0.x is not vulnerable to the...

Ошибка форматной строки в ToolTalk rpc.ttdbserverd (format string)

Позволяет получить привилегии root...

CVE-1999-1247

CVE-1999-1247 affects HP DCE/9000 on HP-UX 9.x via a vulnerability in the HP Camera component, enabling a local attacker to obtain root privileges. The connected documents provide the vulnerability description and affected platform but do not specify the exact root cause, vulnerable versions beyo...

CVE-1999-1471

CVE-1999-1471 affects BSD-based operating systems’ passwd component (versions 4.3 and earlier). The root cause is a buffer overflow when a long shell or GECOS field is supplied, enabling local users to gain root privileges. Connected documents confirm the vulnerability is local and provide no pub...

CVE-1999-1319

Technical details about CVE-1999-1319 are not publicly available in the provided connected documents. Monitor for updates from official sources.

CVE-1999-1166

CVE-1999-1166 affects Linux 2.0.37 and is caused by not properly encoding the Custom segment limit, which allows local users to gain root privileges by accessing or modifying kernel memory. The connected documents reiterate the same description and do not provide a concrete remediation, workaroun...