SCO Unixware 7.0/7.0.1/7.1/7.1.1 - 'uidadmin' Local Privilege Escalation

source: https://www.securityfocus.com/bid/842/info Certain versions of SCO Unixware ship with an exploitable version of the /usr/bin/uidadmin program. The problem lies in that 'uidadmin' runs with root privileges and performs insecure writes to a scratch directory /tmp/ in this instance. A...

CVE-1999-1459

BMC PATROL Agent before 3.2.07 allows local users to gain root privileges via a symlink attack on a temporary file...

CVE-1999-0333

HP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via a symlink attack...

PT-1998-1078 · Hewlett Packard · Hp Openview Omniback

Name of the Vulnerable Software and Affected Versions: HP OpenView Omniback affected versions not specified Description: The issue allows remote execution of commands as root via spoofing. Additionally, local users can gain root access through a symlink attack. Recommendations: At the moment, the...

CVE-1999-1433

HP JetAdmin D.01.09 on Solaris allows local users to change the permissions of arbitrary files via a symlink attack on the /tmp/jetadmin.log file...

CVE-1999-1037

rex.satan in SATAN 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rex.$$ file...

CVE-1999-1036

COPS 1.04 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files in 1 resdiff, 2 ca.src, and 3 mail.chk...

CVE-1999-1038

Tiger 2.2.3 allows local users to overwrite arbitrary files via a symlink attack on various temporary files in Tiger's default working directory, as defined by the WORKDIR variable...

CVE-1999-1480

1 acledit and 2 aclput in AIX 4.3 allow local users to create or modify files via a symlink attack...

CVE-1999-1499

named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on 1 nameddump.db when root kills the process with a SIGINT, or 2 named.stats when SIGIOT is used...

CVE-1999-1498

Slackware Linux 3.4 pkgtool allows local attacker to read and write to arbitrary files via a symlink attack on the reply file...

CVE-1999-1407

ifdhcpc-done script for configuring DHCP on Red Hat Linux 5 allows local users to append text to arbitrary files via a symlink attack on the dhcplog file...

CVE-1999-1486

sadc in IBM AIX 4.1 through 4.3, when called from programs such as timex that are setgid adm, allows local users to overwrite arbitrary files via a symlink attack...

CVE-1999-1269

Screen savers in KDE beta 3 allows local users to overwrite arbitrary files via a symlink attack on the .kss.pid file...

CVE-1999-1439

gcc 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary .i, .s, or .o files...

CVE-1999-0114

Local users can execute commands as other users, and read other users' files, through the filter command in the Elm elm-2.4 mail package using a symlink attack...

PT-1998-1028 · Elm · Elm

Name of the Vulnerable Software and Affected Versions: elm-2.4 mail package Description: The issue allows local users to execute commands as other users and read other users' files through the filter command in the Elm mail package. This is achieved by using a symlink attack. Recommendations: For...

CVE-1999-1210

xterm in Digital UNIX 4.0B with patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a core dump file, which is created when xterm is called with a DISPLAY environmental variable set to a display that xterm cannot access...

CVE-1999-1139

Character-Terminal User Environment CUE in HP-UX 11.0 and earlier allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the IOERROR.mytty file...

PT-1997-1191 · Hewlett Packard · Hp-Ux

Name of the Vulnerable Software and Affected Versions: HP-UX versions 11.0 and earlier Description: The issue allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the IOERROR.mytty file. Recommendations: For HP-UX versions 11.0 and earlier, at the momen...