[MSY] Multiple vulnerabilities in splitvt

--------------- MasterSecuritY www.mastersecurity.fr --------------- ---------------- Multiple vulnerabilities in splitvt ----------------- ------------------ By fish stiqz [email protected] ------------------- --------- And Michel "MaXX" Kaempf [email protected] ---------- -- 0x00 - Table of...

CVE-2000-0467

The CVE-2000-0467 entry documents a buffer overflow in Linux splitvt 1.6.3 and earlier, enabling local users to gain root privileges via a long password in the screen locking function. Affected component: splitvt (Linux). Root cause: buffer overflow in password handling within screen lock. Impact...

CVE-2000-0467

Buffer overflow in Linux splitvt 1.6.3 and earlier allows local users to gain root privileges via a long password in the screen locking function...

Splitvt exploit

Problem ======= Splitvt 1.6.3 contains a buffer overflow, if you have installed splitvt suid root like Debian/Redhat/etc, btw not slackware you should upgrade to 1.6.4. Solution ======= Debian users: see http://www.debian.org/security/2000/20000605a Redhat: Redhat did respond with a "that package...

[SECURITY] New version of splitvt released (update)

Package: splitvt Vulnerability: local root exploit Debian-specific: no This is an update to the previous splitvt advisory. The previous release had incorrrect addresses for the updates for Debian GNU/Linux potato. The version of splitvt distributed in Debian GNU/Linux 2.1 a.k.a. slink, as well as...

[SECURITY] New version of splitvt released

Package: splitvt Vulnerability: local root exploit Debian-specific: no The version of splitvt distributed in Debian GNU/Linux 2.1 a.k.a. slink, as well as in the frozen potato and unstable woody distributions, is vulnerable to a local buffer overflow. This could be exploited to give a shell runni...

[SECURITY] New version of splitvt released (update)

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman June 5, 2000 - ------------------------------------------------------------------------ Package: splitvt Vulnerability: local root...

[SECURITY] New version of splitvt released

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz June 5, 2000 - ---------------------------------------------------------------------------- Package: splitvt Vulnerability:...

CVE-2000-0467

Buffer overflow in Linux splitvt 1.6.3 and earlier allows local users to gain root privileges via a long password in the screen locking function...

Sam Lantinga splitvt 1.6.3 - Local Buffer Overflow

Sam Lantinga splitvt 1.6.3 - Local Buffer Overflow // source: https://www.securityfocus.com/bid/1346/info A buffer overflow condition that could be exploited to obtain root exists in splitvt 1.6.3 and earlier. Splitvt is distributed with several Linux distributions. / Local exploit for Debian...

Sam Lantinga splitvt 1.6.3 - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/1346/info A buffer overflow condition that could be exploited to obtain root exists in splitvt 1.6.3 and earlier. Splitvt is distributed with several Linux distributions. / Local exploit for Debian splitvt 1.6.3-4 - by Syzop Thanks to aleph1 for writin...

CVE-1999-0316

CVE-1999-0316 describes a buffer overflow in the Linux splitvt command that allows local users to gain root access. The linked Red Hat, CVE listings, and PTsecurity entry corroborate local privilege escalation via an overflow in splitvt. The PTsecurity entry notes that affected versions are not s...

CVE-1999-0316

Buffer overflow in Linux splitvt command gives root access to local users...

PT-1995-1019 · Linux · Splitvt

Name of the Vulnerable Software and Affected Versions: Linux splitvt command affected versions not specified Description: A buffer overflow issue in the Linux splitvt command allows local users to gain root access. Recommendations: At the moment, there is no information about a newer version that...