CVE-2021-34591

In Bender/ebee Charge Controllers in multiple versions are prone to Local privilege Escalation. An authenticated attacker could get root access via the suid applications socat, ip udhcpc and ifplugd...

Libopt.a 3.1x Error Logging Buffer Overflow Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/7433/info Libopt library has been reported prone to a buffer overflow vulnerability. It has been reported that several Libopt.a error logging functions, may be prone to buffer overflow vulnerabilities when handling...

QNX Neutrino RTOS privilege escalation

It's possible to overwrite files via LDDEBUGOUTPUT for suid applications...

IBM AIX libc privilege escalation

It's possible to maniuplate files via LIBINITDBG and LIBINITDBGFILE environment variables for suid applications...

IBM Informix Dynamic Server privilege escalation

Directory traversal on DBLANG environment variable parsing allows to specify attacker-controlled NLS files, leading to possibility of format string attacks for suid applications...

Multiple Linux kernel vulnerabilities

nfconntrackh323 NULL pointer dereference, invalid suid applications parent process termination signal handling, privilege escalation on Intel 965 chipset...

Symantec Live Update for Macintosh privilege escalation

suid applications executes external application by relative path...

Ошибка форматной строки в функциях Unixware message catalog (format string)

Ошибка форматной строки почти во всех suid-приложениях...

Переполнение буфера в CDE dt-утилитах - libdtsvc (buffer overflow)

Переполнения буфера в suid/sgid приложениях...

CVE-2001-0169

When using the LDPRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib...

CVE-2001-0169

When using the LDPRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib...

Дырка в Solaris (ximp40)

Переполнение буфера в динамической библиотеке ximp40 используемой многими suid приложениями...

Серьезная уязвимость многих Unix через locale в glibc

Функции работы с locale позволяют пользователям создавать пользовательские отображения строк, при этом не проверяется наличие форматных символов. Функции locale используются многими suid-приложениями. В некоторых случаях проблема становится удаленной из-за некорректной обработки переменных...