Merit AAA RADIUS Server 3.8 - rlmadmin Symbolic Link

Merit AAA RADIUS Server 3.8 - rlmadmin Symbolic Link source: https://www.securityfocus.com/bid/3302/info The 'rlmadmin' user management utility included with the Merit AAA RADIUS Server package is susceptible to a trivial symbolic link attack. The program allows users to specify a directory from...

CVE-2001-1153

lpsystem in OpenUnix 8.0.0 allows local users to cause a denial of service and possibly execute arbitrary code via a long command line argument...

remedy.txt

Security Holes in Remedy Client Installer Summary ------- Due to improper handling of temporary files, the installer program for Remedy Software's Action Request System client for unix can allow local users to gain root privileges. Details ------- The installer script for the unix AR clients...

Microsoft Windows NT 4.0 - NT4ALL Denial of Service

source: https://www.securityfocus.com/bid/3144/info It has been reported that it is possible to cause a denial of service on a Windows NT system using the 'NT4ALL' tool. The DoS reportedly occurs after the system reboots while being set in 'special mode' using 'NT4ALL'. In order to exploit NT4ALL...

Oracle OTRCREP Oracle 8/9 - Home Environment Variable Buffer Overflow

// source: https://www.securityfocus.com/bid/3139/info Oracle is an Enterprise level SQL database, supporting numerous features and options. It is distributed and maintained by Oracle Corporation. A buffer overflow has been discovered in the handling of $ORACLEHOME by otrcrep. otrcrep is installe...

CVE-2001-1179

xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters...

Slackware 7.07.18.0 - Manual Page Cache File Creation

Slackware 7.07.18.0 - Manual Page Cache File Creation // source: https://www.securityfocus.com/bid/3054/info Slackware Linux contains a configuration error that enables local users to create files in the directory used by the system manual pager 'man' for cache files. Due to the behaviour of the...

The Oracle Internet Directory LDAP (oidldapd) contains buffer overflow

Overview Oracle Internet Directory version 2.0.6, which ships with Oracle version 8i for Linux 8.1.6, contains a program, oidldapd, that is an LDAP Daemon. There is a buffer overflow in the LDAP Daemon that allows a local user to obtain the euid of the oidldapd process, typically user oracle...

cfingerd 1.4.1/1.4.2/1.4.3 Utilities - Local Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/2914/info cfingerd is a secure implementation of the finger daemon. cfingerd has been contributed to by many authors, and is maintained by the cfingerd development team. A buffer overflow in cfingerd makes it possible for a local user to gain elevated...

CVE-2001-1180

FreeBSD 4.3 does not properly clear shared signal handlers when executing a process, which allows local users to gain privileges by calling rfork with a shared signal handler, having the child process execute a setuid program, and sending a signal to the child...

Cobalt Raq3 PopRelayD - Arbitrary SMTP Relay

source: https://www.securityfocus.com/bid/2986/info poprelayd is a script that parses /var/log/maillog for valid pop logins, and based upon the login of a client, allows the person logged into the pop3 service to also send email from the ip address they're accessing the system with. poprelayd...

PHP 4.x - SafeMode Arbitrary File Execution

source: https://www.securityfocus.com/bid/2954/info PHP is the Personal HomePage development toolkit, distributed by the PHP.net, and maintained by the PHP Development Team in public domain. A problem with the toolkit could allow elevated privileges, and potentially unauthorized access to...

CVE-2001-0407

Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileges by creating a database whose name starts with .. dot dot...

Sun SunVTS 4.x - PTExec Buffer Overflow

source: https://www.securityfocus.com/bid/2898/info SunVTS is the Sun Validation Test Suite, distributed and maintained by Sun Microsystems. The SunVTS is used to test various components of OEM Sun hardware, and can also be used to stress-test components and sub-components. A buffer overflow in t...

CVE-2001-0401

Buffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable...

man 'makewhatis' insecurely uses /tmp

Overview The 'makewhatis' script in the Linux man package allows local users to overwrite files via a symlink attack. Description The 'makewhatis' program is a Bourne shell script that ships with many Linux distributions in the 'man' package of programs. The 'makewhatis' script creates files in t...

BestCrypt 0.60.70.8 - BCTool UMount Buffer Overflow

BestCrypt 0.60.70.8 - BCTool UMount Buffer Overflow // source: https://www.securityfocus.com/bid/2875/info BestCrypt is a commercial file system encryption software package distributed by Jetico. BestCrypt offers compatibility on the Windows and Linux platforms, using open development standards t...

XFree86 X11R6 3.3.2 XMan - ManPath Environment Variable Buffer Overflow

source: https://www.securityfocus.com/bid/3030/info xman is a component included with the XFree86 Window System. A buffer overflow in the handling of the MANPATH environment variable by xman makes it possible for a local user to execute arbitrary code. By inserting 70000 characters into the MANPA...

gpm creates temporary files insecurely

Overview gpm version 1.19.3, which usually runs as root, is vulnerable due to a flaw that allows a local user to exploit a race condition to corrupt files that gpm uses. Description gpm General Purpose Mouse is a program that lets you use the mouse in console mode when not using XWindows. It is...

Debian 2.12.2 - Man Cache File Creation

Debian 2.12.2 - Man Cache File Creation source: https://www.securityfocus.com/bid/2815/info A vulnerability exists in the 'man' system manual pager program. It is possible for local users to cause man to cache files in the system cache directory from outside of the configured manual page hierarch...