Code injection

misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges...

CVE-2008-0162

misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges...

CVE-2008-0162

CVE-2008-0162 affects SplitVT; in versions 1.6.6 and earlier, misc.c does not drop group privileges before executing xprop, enabling a local attacker to gain the utmp group privileges. Affected: splitvt prior to upgrade; root cause is privilege retention during xprop invocation. Impact is local p...

CVE-2008-0162

misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges...

[SECURITY] [DSA 1500-1] New splitvt packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1500-1 [email protected] http://www.debian.org/security/ Steve Kemp February 21, 2008 http://www.debian.org/security/faq -...

DSA-1500-1 splitvt - privilege escalation

Bulletin has no description...

Debian Security Advisory DSA 014-1 (splitvt)

The remote host is missing an update to splitvt announced via advisory DSA 014-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 014-1 (splitvt)

The remote host is missing an update to splitvt announced via advisory DSA 014-1. OpenVAS Vulnerability Test $Id: deb0141.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 014-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian DSA-014-2 : splitvt - buffer overflow and format string attack

It was reported recently that splitvt is vulnerable to numerous buffer overflow attack and a format string attack. An attacker was able to gain access to the root user id. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

CVE-2001-0111

Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile command line argument...

CVE-2001-0111

CVE-2001-0111 : The vulnerability affects the splitvt utility (before 1.6.5). It is a format-string flaw that can allow a local attacker to run arbitrary commands via the -rcfile argument. Debian’s DSA-014-2 describes a buffer overflow/format-string attack with root access risk; remediation is up...

CVE-2001-0112

Multiple buffer overflows in splitvt before 1.6.5 allow local users to execute arbitrary commands...

CVE-2001-0111

Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile command line argument...

CVE-2001-0112

The CVE-2001-0112 entry concerns the splitvt utility: multiple buffer overflows in splitvt prior to 1.6.5 allow local users to execute arbitrary commands. Public details in the connected documents confirm affected software (splitvt) and the vulnerable version range (before 1.6.5), with Debian and...

CVE-2001-0112

Multiple buffer overflows in splitvt before 1.6.5 allow local users to execute arbitrary commands...

splitvt < 1.6.5 Local Exploit

Exploit for linux platform in category local exploits ============================= splitvt spitvt.c - Local exploit for splitvt Copyright C 2001 Michel "MaXX" Kaempf Updated versions of this exploit and the corresponding advisory will be made available at: ftp://maxx.via.ecp.fr/spitvt/ This...

splitvt 1.6.5 - Local Overflow

splitvt 1.6.5 - Local Overflow / MasterSecuritY spitvt.c - Local exploit for splitvt Copyright C 2001 Michel "MaXX" Kaempf Updated versions of this exploit and the corresponding advisory will be made available at: ftp://maxx.via.ecp.fr/spitvt/ This program is free software; you can redistribute i...

[SECURITY] [DSA-014-2] Correction: New version of splitvt released

---------------------------------------------------------------------------- Debian Security Advisory DSA-014-2 [email protected] http://www.debian.org/security/ Martin Schulze January 23, 2001 - ---------------------------------------------------------------------------- Package : splitvt...

[SECURITY] [DSA-014-1] New version of splitvt released

---------------------------------------------------------------------------- Debian Security Advisory DSA-014-1 [email protected] http://www.debian.org/security/ Martin Schulze January 23, 2001 - ---------------------------------------------------------------------------- Package : splitvt...

Debian 2.2 - splitvt Format String

// source: https://www.securityfocus.com/bid/2210/info splitvt is a VT100 window splitter, designed to allow the user two command line interfaces in one terminal window, originally written by Sam Lantinga. It is freely available, open source, and included with many variants of the Linux Operating...