Solaris dtmail format string bug

format string bug in argv0 allows privilege escalation to gid group...

SA2001-04 : Solaris dtmail Buffer Overflow Vulnerability

NSFOCUS Security AdvisorySA2001-04 Topic: Solaris dtmail Buffer Overflow Vulnerability Release DateЈє 2001-7-24 CVE CAN ID : CAN-2001-0548 BUGTRAQ ID : 3081 Affected system: ================ Sun Solaris 2.6 SPARC/x86 Sun Solaris 7 SPARC/x86 Not affected system: ==================== Sun Solaris 8...

Solaris 2.67.0 - DTMail Mail Environment Variable Buffer Overflow

Solaris 2.67.0 - DTMail Mail Environment Variable Buffer Overflow // source: https://www.securityfocus.com/bid/3081/info dtmail is an application included with the Common Desktop Environment, one of the X Window Managers included with Solaris. A buffer overflow in dtmail makes it possible for a...

solaris-dtmail-bof.txt

Solaris DTmail vulnerable to buffer overflow attack. DTmail - a program that acts as a mail user agent for the Common Desktop Environment CDE - is vulnerable to a buffer overflow attack which might cause the execution of arbitrary code with the privileges of the user "mail" and that of the actual...