Linux Kernel 2.0.37 - Segment Limit Privilege Escalation

Linux Kernel 2.0.37 - Segment Limit Privilege Escalation / source: https://www.securityfocus.com/bid/523/info This vulnerability has to do with the division of the address space between a user process and the kernel. Because of a bug, if you select a non-standard memory configuration, sometimes...

IBM AIX 4.3 - 'infod' Local Privilege Escalation

/ source: https://www.securityfocus.com/bid/370/info Certain versions of AIX ship with an Information Daemon, infod. This program is designed to provide information about the OS and installed ancilliary programs. The daemon which runs as root, does not check credentials which are passed to it. Th...

Slackware Linux 3.5 - '/etc/group' Local Privilege Escalation

source: https://www.securityfocus.com/bid/155/info Due to the way /bin/login behaves when a /etc/group file is not present under Slackware's version of the password shadowing suite, users who log in while this file is not present will be given uid and gid 0. This will allow them unrestricted acce...

CVE-1999-0169

NFS allows attackers to read and write any file on the system by specifying a false UID...

PT-1997-1073 · Nfs · Nfs

Name of the Vulnerable Software and Affected Versions: NFS affected versions not specified Description: The issue allows attackers to read and write any file on the system by specifying a false UID. Recommendations: At the moment, there is no information about a newer version that contains a fix...

CVE-1999-1299

rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, since 65535 is interpreted as -1 by chown and other system calls, which causes the calls to fail to modify the ownership of the file...

John S.2 Roberts AnyForm 1.0/2.0 - CGI Semicolon

source: https://www.securityfocus.com/bid/719/info AnyForm is a popular form CGI designed to support simple forms that deliver responses via email. Certain versions of AnyForm did not perform user supplied data sanity checking and could be exploited by remote intruders to execute arbitrary...

PT-1990-1000 · Nfs · Nfs

Name of the Vulnerable Software and Affected Versions: NFS servers affected versions not specified Description: The issue allows users to gain privileges by creating a writable kmem device and setting the UID to 0 using the mknod command. Recommendations: At the moment, there is no information...