1305 matches found
SCO Open Server 5.0.6 - lpusers Buffer Overflow
source: https://www.securityfocus.com/bid/2557/info SCO OpenServer 5.0.6 and possibly earlier versions ships with several suid bin executables used in printer administration and related tasks. This includes lpusers, a component used to set the queue priority of jobs submitted to the LP print...
CVE-2001-0176
The setuid doroot program in Voyant Sonata 3.x executes arbitrary command line arguments, which allows local users to gain root privileges...
[ Hackerslab bug_paper ] SunOS application perfmon vulnerability
============================================================================== Hackerslab bugpaper SunOS application perfmon vulnerability ============================================================================== File : /opt/JSParm/bin/perfmon SYSTEM : Solaris 2.X INFO : parm is a program th...
Дырка в snmpd в Solaris
Переполнение буфера при разборе аргументов дает возможность получения привилегий root...
Xmail 0.5/0.6 CTRLServer - Arbitrary Commands
// source: https://www.securityfocus.com/bid/2360/info Versions of CTRLServer are vulnerable to malicious user-supplied input. A failure to properly bounds-check data passed to the cfgfileget command leads to an overflow, which, properly exploited, can result in remote execution of malicious code...
Xmail 0.50.6 CTRLServer - Arbitrary Commands
Xmail 0.50.6 CTRLServer - Arbitrary Commands // source: https://www.securityfocus.com/bid/2360/info Versions of CTRLServer are vulnerable to malicious user-supplied input. A failure to properly bounds-check data passed to the cfgfileget command leads to an overflow, which, properly exploited, can...
CVE-2000-0995
Format string vulnerability in OpenBSD yppasswd program and possibly other BSD-based operating systems allows attackers to gain root privileges a malformed name...
CVE-2000-0997
Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root privileges...
Удаленная дыра в BSD ftpd
Однобайтное переполнение стека позволяет получить привелегии root...
Solaris 2.52.5.12.67.0 - sadmind Remote Buffer Overflow (3)
Solaris 2.52.5.12.67.0 - sadmind Remote Buffer Overflow 3 // source: https://www.securityfocus.com/bid/866/info Certain versions of Solaris ship with a version of sadmind which is vulnerable to a remotely exploitable buffer overflow attack. sadmind is the daemon used by Solstice AdminSuite...
CVE-2000-0466
AIX cdmount allows local users to gain root privileges via shell metacharacters...
Дырка в keydebugd в True64 Unix
ПРотокол позволяет перезаписать любой файл неавторизованным пользователем с привилегией root...
Diskcheck 3.1.1 Symlink Vulnerability
Diskcheck 3.1.1 Symlink Vulnerability 1 Introduction DiskCheck is a Perl script that monitors how much space is available on your hard drive. Basically, it checks your drive space every hour and takes action based on the specifications in the config file /etc/diskcheck.conf. DiskCheck 3.1.1 is...
OpenSSH's UseLogin option allows remote access with root privilege.
OpenSSH's UseLogin option allows remote access with root privilege. 1. Systems affected: The default installation of OpenSSH is not vulnerable, since UseLogin defaults to 'no'. However, if UseLogin is enabled, all versions of OpenSSH prior to 2.1.1 are affected. 2. Description: If the UseLogin...
CVE-1999-0866
CVE-1999-0866 describes a buffer overflow in the UnixWare xauto program that allows local users to gain root privileges. Affected software: UnixWare xauto component. Root cause: buffer overflow leading to privilege escalation. Impact: complete confidentiality, integrity, and availability (per CVS...
CVE-1999-0866
Buffer overflow in UnixWare xauto program allows local users to gain root privilege...
XFree86 server overflow
XFree86 3.3.6 and probably 4.0.0 as well ; - by running X server no matter it's setuid, or called from setuid Xwrapper - works in both cases, seems to me Xwrapper in default RH 6.x distro is rather dumb ; with -xkbmap parameter and over 2100 of 'A's or shellcode, again, it's rather trivial to...
CVE-2000-0218
The CVE-2000-0218 entry concerns a buffer overflow in the Linux mount and umount utilities that allows local users to gain root privileges via a long relative pathname. Affected component: the mount/umount helpers in Linux. Root cause: a buffer overflow vulnerability enabling escalation to root (...
Matt Kimball and Roger Wolff mtr 0.28/0.41 / Turbolinux 3.5 b2/4.2/4.4/6.0 - mtr (2)
// source: https://www.securityfocus.com/bid/1038/info A potential vulnerability exists in the 'mtr' program, by Matt Kimball and Roger Wolff. Versions prior to 0.42 incorrectly dropped privileges on all Unix variants except HPUX. By calling a seteuidgetuid call, the authors hoped to drop...