HP-UX 11i - 'LIBC TZ' Enviroment Variable Privilege Escalation

/ HP-UX libc timezone environment overflow exploit ================================================ HP-UX libc contains an exploitable stack overflow in the handling of "TZ" environment variable. The problem occurs due to insufficient bounds checking in the localtimer and related functions. Any...

Solaris libc getopt(3) contains buffer overflow

Overview Solaris libc getopt3 contains a buffer overflow vulnerability. Please note the date of this report: 1/27/1997. This does not affect current versions of Solaris. Description From :A buffer overflow condition exists in the getopt3 routine in Solaris libc. By supplying an invalid option and...

cdrtools2.0 Format String Vulnerability

---------------------------------------------------------------------------- PACKAGE : cdrtools VERSION : 2.0 SUMMARY : Format String SEVERITY : local root exploit if suid on several distros DATE: : 2003-05-05 ---------------------------------------------------------------------------- Hi, i woul...

Дырка в ePerl (buffer overflow)

Переполнение буфера. Программа не-suid по-умолчанию...

Дырка в kon2

Переполнение буфера в суидной программе fld дает возможность получения локальных привилегий root...

PT-1990-1003 · At&T +1 · Korn Shell +1

Name of the Vulnerable Software and Affected Versions: HP Apollo Domain/OS versions sr10.2 through sr10.3 beta Description: The issue is related to the /etc/suid exec program and the Korn Shell ksh in HP Apollo Domain/OS. Recommendations: For HP Apollo Domain/OS versions sr10.2 through sr10.3 bet...