54 matches found
CVE-2008-0162
misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges...
CVE-2008-0162
CVE-2008-0162 affects SplitVT; in versions 1.6.6 and earlier, misc.c does not drop group privileges before executing xprop, enabling a local attacker to gain the utmp group privileges. Affected: splitvt prior to upgrade; root cause is privilege retention during xprop invocation. Impact is local p...
CVE-2008-0162
misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges...
CVE-2008-0162
misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges...
[SECURITY] [DSA 1500-1] New splitvt packages fix privilege escalation
------------------------------------------------------------------------ Debian Security Advisory DSA-1500-1 [email protected] http://www.debian.org/security/ Steve Kemp February 21, 2008 http://www.debian.org/security/faq -...
DSA-1500-1 splitvt - privilege escalation
Bulletin has no description...
Debian Security Advisory DSA 014-1 (splitvt)
The remote host is missing an update to splitvt announced via advisory DSA 014-1. OpenVAS Vulnerability Test $Id: deb0141.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 014-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 014-1 (splitvt)
The remote host is missing an update to splitvt announced via advisory DSA 014-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-014-2 : splitvt - buffer overflow and format string attack
It was reported recently that splitvt is vulnerable to numerous buffer overflow attack and a format string attack. An attacker was able to gain access to the root user id. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...
CVE-2001-0111
CVE-2001-0111 : The vulnerability affects the splitvt utility (before 1.6.5). It is a format-string flaw that can allow a local attacker to run arbitrary commands via the -rcfile argument. Debian’s DSA-014-2 describes a buffer overflow/format-string attack with root access risk; remediation is up...
CVE-2001-0111
Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile command line argument...
CVE-2001-0111
Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile command line argument...
CVE-2001-0112
Multiple buffer overflows in splitvt before 1.6.5 allow local users to execute arbitrary commands...
CVE-2001-0112
Multiple buffer overflows in splitvt before 1.6.5 allow local users to execute arbitrary commands...
CVE-2001-0112
The CVE-2001-0112 entry concerns the splitvt utility: multiple buffer overflows in splitvt prior to 1.6.5 allow local users to execute arbitrary commands. Public details in the connected documents confirm affected software (splitvt) and the vulnerable version range (before 1.6.5), with Debian and...
splitvt 1.6.5 - Local Overflow
splitvt 1.6.5 - Local Overflow / MasterSecuritY spitvt.c - Local exploit for splitvt Copyright C 2001 Michel "MaXX" Kaempf Updated versions of this exploit and the corresponding advisory will be made available at: ftp://maxx.via.ecp.fr/spitvt/ This program is free software; you can redistribute i...
splitvt < 1.6.5 Local Exploit
Exploit for linux platform in category local exploits ============================= splitvt spitvt.c - Local exploit for splitvt Copyright C 2001 Michel "MaXX" Kaempf Updated versions of this exploit and the corresponding advisory will be made available at: ftp://maxx.via.ecp.fr/spitvt/ This...
[SECURITY] [DSA-014-2] Correction: New version of splitvt released
---------------------------------------------------------------------------- Debian Security Advisory DSA-014-2 [email protected] http://www.debian.org/security/ Martin Schulze January 23, 2001 - ---------------------------------------------------------------------------- Package : splitvt...
[SECURITY] [DSA-014-1] New version of splitvt released
---------------------------------------------------------------------------- Debian Security Advisory DSA-014-1 [email protected] http://www.debian.org/security/ Martin Schulze January 23, 2001 - ---------------------------------------------------------------------------- Package : splitvt...
[MSY] Multiple vulnerabilities in splitvt
--------------- MasterSecuritY www.mastersecurity.fr --------------- ---------------- Multiple vulnerabilities in splitvt ----------------- ------------------ By fish stiqz [email protected] ------------------- --------- And Michel "MaXX" Kaempf [email protected] ---------- -- 0x00 - Table of...