SLRNPull 0.9.6 Spool Directory Command Line Parameter Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4569/info N is a freely available, open source news reading utility. It is developed and maintained by the SLRN project, and designed for use on various operating systems. This problem affects the UNIX and Linux...

DEBIAN-CVE-2002-0740

Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d SPOOLDIR argument...

CVE-2002-0740

Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d SPOOLDIR argument...

Slrnpull Buffer Overflow (-d parameter)

Slrnpull Buffer Overflow -d parameter ======================================= Author: Alex Hernandez [email protected] Thanks all the people from Spain and Argentina. Special Greets: White-B, Paco Spain, Gabriel M. Thanks friends for all the research: + Solar Eclipse...

Buffer overflow in slrnpull

Buffer overflow on -d command line option...

SLRNPull 0.9.6 - Spool Directory Command Line Parameter Buffer Overflow

source: https://www.securityfocus.com/bid/4569/info N is a freely available, open source news reading utility. It is developed and maintained by the SLRN project, and designed for use on various operating systems. This problem affects the UNIX and Linux implementation. Due to a boundary condition...

SLRNPull 0.9.6 - Spool Directory Command Line Parameter Buffer Overflow

SLRNPull 0.9.6 - Spool Directory Command Line Parameter Buffer Overflow source: https://www.securityfocus.com/bid/4569/info N is a freely available, open source news reading utility. It is developed and maintained by the SLRN project, and designed for use on various operating systems. This proble...

Re: rh 6.2 - gid compromises, etc

slrnpull setgid: news - using eg. NNTPSERVER environmental variable, you can cause nice SEGV... egid==news, of course. On systems running innd server and probably other newsservers as well, group 'news' can be used to control content of whole spool, and to elevate privledges, gaining euid news...