6807 matches found
CVE-2002-0755
The CVE concerns Kerberos 5 su (k5su) in FreeBSD 4.5 and earlier, where the process does not verify wheel-group membership before granting superuser privileges. This could allow an unauthorized user to execute commands as root. Affected component is the k5su integration in FreeBSD’s Kerberos setu...
CVE-2002-0754
Affected software : Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier. Vulnerability : k5su relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges after it has dropped them. Impact : potential privilege e...
QNX RTOS 4.25/6.1 - su Password Hash Disclosure
source: https://www.securityfocus.com/bid/4914/info It has been reported that the 'su' utility for QNX RTOS accepts the SIGSEGV signal and dumps a world readable core file. An attacker is able to analyze the core file and obtain very sensitive information. It is very probable that this is a...
CVE-1999-1142
SunOS 4.1.2 and earlier allows local users to gain privileges via LD_* environment variables affecting dynamically linked setuid/setgid programs (e.g., login, su, sendmail) by causing real and effective UIDs to the same user. This yields a local escalation with complete confidentiality and integr...
CVE-1999-1318
CVE-1999-1318 affects SunOS 4.1.3 and earlier. The vulnerable component is /usr/5bin/su , which uses a search path that includes the current working directory (.). This allows local users to gain privileges via Trojan horse programs. The description clearly states a local privilege escalation and...
CVE-2001-0762
Buffer overflow in su-wrapper 1.1.1 allows local users to execute arbitrary code via a long first argument...
CVE-2001-0762
Buffer overflow in su-wrapper 1.1.1 allows local users to execute arbitrary code via a long first argument...
CVE-2001-0762
CVE-2001-0762 describes a buffer overflow in su-wrapper 1.1.1 that allows local users to execute arbitrary code by providing a long first argument. The vulnerability is consistent with a local-exploit scenario and a potential impact on confidentiality, integrity, and availability as per the CVSS ...
Caldera OpenUnix8 Overflows (reject, lpsystem, su)
I contacted Caldera SCO about some local overflows in a few binaries that came default with my install of OpenUnix8... Here is a snippet of the email dialog between us. Due to the lack of access to the machine and lack of a good debugger on the system, I have not had time to put any further...
Переполнение буфера в su-wrapper (buffer overflow)
Переполнение буфера в агрументе командной строки...
su-wrapper 1.1.1 Local root exploit.
/ - su-wrapper.c - / // / /usr/sbin/su-wrappersu-wrapper 1.1.1 local root exploit. / / / / Package Description: / / su-wrapper is an little util which lets special users execute / / processes under another uid/gid. / / / / Vulnerability Description: / / If a long line on the first argument is...
CVE-2000-0996
Format string vulnerability in OpenBSD su program and possibly other BSD-based operating systems allows local attackers to gain root privileges via a malformed shell...
GLIBC - '/bin/su' Local Privilege Escalation
/ Working exploit for glibc executing /bin/su To exploit this i have used a technique that overwrites the .dtors section of /bin/su program with the address of the shellcode, so, the program executes it when main returns or exit is called Thanks a lot to rwxrwxrwx for explaining me this technique...
Re: OpenBSD Security Advisory
Hi, Here is another exploit for an application fstat that OpenBSD's format string audit has seemingly forgotten about. What I would like to know is why this and a number of other privileged applications have security vulnerabilities in them. They WERE fixed, but NO ADVISORY nor ANY MENTION IN THE...
CVE-2000-0118
The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing...
CVE-2000-0118
The CVE-2000-0118 entry concerns the Red Hat Linux su program: when the su process is killed before its timeout, failed password guesses aren’t logged, enabling local brute-force password guessing. The affected component is the su utility; the root cause is failure to log failed attempts due to p...
CVE-1999-0845
Buffer overflow in SCO su program allows local users to gain root access via a long username...
CVE-1999-0845
The CVE-1999-0845 entry describes a buffer overflow in the SCO ‘su’ program that allows a local user to gain root privileges by supplying a long username. The vulnerable component is the su utility on SCO Unix-like systems; impact is local privilege escalation to root . Connected documents corrob...
unixware.su.txt
-----Original Message----- Date: Fri, 26 Nov 1999 04:16:41 +0300 MSK From: Matt Conover To: [email protected] cc: [email protected] Subject: w00giving '99 5 and w00news: UnixWare 7's su Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII w00w00 Security Developmen...