8322 matches found
SGI IRIX rpc.xfsmd uses weak authentication mechanism for RPC authentication
Overview The XFS file system on SGI systems allows anonymous remote users to call xfs-related RPC functions. Description XFS is a 64-bit compliant journaling file system. The XFS journaling filesystem daemon rpc.xfsmd on SGI systems uses the default AUTHUNIX authentication mechanism a client-base...
SGI IRIX rpc.xfsmd does not filter shell metacharacters from user input before invoking popen() function
Overview The XFS journaling filesystem daemon uses a call to popen3 with unfiltered client-controlled input. This will lead to arbitrary command execution on remote systems. Description XFS is a 64-bit compliant journaling file system. The XFS journaling filesystem daemon xfsmd on SGI systems use...
DSA-146 dietlibc - integer overflow
Bulletin has no description...
RPC rusers Remote Information Disclosure
The rusersd RPC service is running. It provides an attacker interesting information such as how often the system is being used, the names of the users, and more. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11058; scriptversion"1.19"; scriptcvsdate"Date: 2018/08/13...
FreeBSD-SA-02:34.rpc
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:34.rpc Security Advisory The FreeBSD Project Topic: Sun RPC XDR decoder contains buffer overflow Category: core Module: libc Announced: 2002-08-01 Credits: ISS X-Force...
ISS Security Brief: Remote Buffer Overflow Vulnerability in Sun RPC
Internet Security Systems Security Brief July 31, 2002 Remote Buffer Overflow Vulnerability in Sun RPC Synopsis: Internet Security Systems ISS X-Force has discovered a buffer overflow in the xdrarray filter primitive. This function is a part of the Sun RPC library, and it is used in multiple RPC...
Advisory CA-2002-20 Multiple Vulnerabilities in CDE ToolTalk
-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2002-20 Multiple Vulnerabilities in CDE ToolTalk Original release date: July 10, 2002 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Systems running CDE ToolTalk Overview Two...
Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) does not adequately validate file descriptor arguement to _TT_ISCLOSE()
Overview The Common Desktop Environment CDE ToolTalk RPC database server does not adequately validate a client-supplied argument, allowing attackers to overwrite certain locations in memory with zeros. This vulnerability could be exploited in a number of ways, potentially allowing attackers to:...
Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) does not adequately validate file operations
Overview The Common Desktop Environment CDE ToolTalk RPC database server does not adequately validate file operations and follows symbolic links, allowing a local attacker to overwrite any file that is writeable by the server. The ToolTalk RPC database server typically runs with root privileges...
CVE-2002-0573
Format string vulnerability in RPC wall daemon rpc.rwalld for Solaris 2.5.1 through 8 allows remote attackers to execute arbitrary code via format strings in a message that is not properly provided to the syslog function when the wall command cannot be executed...
CVE-2002-0359
xfsmd for IRIX 6.5 through 6.5.16 uses weak authentication, which allows remote attackers to call dangerous RPC functions, including those that can mount or unmount xfs file systems, to gain root privileges...
SGI IRIX 6.x - rpc.xfsmd Remote Command Execution
SGI IRIX 6.x - rpc.xfsmd Remote Command Execution // source: https://www.securityfocus.com/bid/5075/info Throghout the implementation of the supported remote procedure calls, the server uses the popen libc function. When popen is used, arguments passed to the RPC are included in the command strin...
tcpdump vulnerable to buffer overflow via improper decoding of AFS RPC (Rx) packets
Overview A vulnerability exists in tcpdump that could allow an attacker to execute arbitrary code with the privileges of tcpdump, typically root. Description tcpdump is a widely-used network sniffer that is capable of decoding AFS traffic. A buffer overflow vulnerability has been discovered in...
[LSD] Solaris cachefsd remote buffer overflow vulnerability
Solaris cachefsd remote buffer overflow vulnerability We would like to report another security vulnerability in the Solaris cachefsd program, which allows remote root access to the vulnerable system. The following information has been sent to Sun Microsystems some time ago, yet we have not receiv...
Solaris rpc.rwalld Remote Format String Arbitrary Code Execution
The rpc.walld RPC service is running. Some versions of this server allow an attacker to gain root access remotely, by consuming the resources of the remote host then sending a specially formed packet with format strings to this host. Solaris 2.5.1, 2.6, 7, 8 and 9 are vulnerable to this issue...
eSecurityOnline Security Advisory 4197 - Sun Solaris cachefsd den ial of service vulnerability
eSO Security Advisory: 4197 Discovery Date: October 29, 2001 ID: eSO:4197 Title: Sun Solaris cachefsd denial of service vulnerability Impact: Remote attackers can cause a denial of service condition Affected Technology: Solaris 2.6, 7, 8 SPARC and x86 Vendor Status: Vendor notified Discovered By:...
DCOM information leakage
Some RPC request may contain data from uninitialized memory...
CVE-2002-0039
CVE-2002-0039 affects SGI IRIX 6.5 (and older) where rpcbind is vulnerable to remote DoS via malformed RPC packets with invalid lengths, causing a crash. The issue is in the rpcbind/portmap handling and can be triggered remotely without local credentials. SGI released patches and fixes in IRIX 6....
IRIX rpc/HOSTALIASES vulnerability
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: IRIX rpc/HOSTALIASES vulnerability Number: 20020306-01-P Date: March 28, 2002 Reference: CVE CAN-2002-0039 RPC Reference: CVE CAN-2002-0040 HOSTALIASES - ----------------------- - --- Issue Specifics --- - ----------------------- It'...