Дырки в утилитах Unixware (buffer overflow)

Переполнение буфера во многих утилитах Unixware 7.1, включая Sgid bin rtpm, при длинной shell-переменной TERM...

Проблемы символьных линков в утилитах SCO (symbolic link)

No description provided...

Дырки в различных утилитах под Solaris (buffer overflow)

Классическое переполнение буфера при разборе командной строки и переменных среды окружения...

splex.txt

Security Hole in Shareplex 2.x ------------------------------ Summary ------- Shareplex Quest Software's product for Oracle database replication contains a security hole which can allow local users to read any file on the system, effectively bypassing the permissions set at the OS level. Details...

Проблемы символьных линков во многих утилитах (linux)

Во многих утилитах не проверяют символьные линки при создании временных файлов...

Пофиксены многочисленные локальные дырки в AIX

Многочисленный suid/sgid утилиты содержали переполнение буфера...

Security Advisory: FreeBSD-SA-00:68.ncurses

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:68 Security Advisory FreeBSD, Inc. Topic: ncurses allows local privilege escalation Category: core Module: ncurses Announced: 2000-11-13 Affects: FreeBSD 5.0-CURRENT, 4.x...

Дырки в клиентских утилитах под BeOS

Дырки в различных клиентских утилитах...

Серьезная дырка воо всех утилитах семейства chpass

Утилиты chfn/chpass/chsh/ypchfn/ypchpass/ypchsh/passwd содержат уязвимость форматной строки...

FreeBSD-SA-00:58.chpass

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:58 Security Advisory FreeBSD, Inc. Topic: chpass family contains local root vulnerability Category: core Module: chfn/chpass/chsh/ypchfn/ypchpass/ypchsh/passwd Announced:...

Дырки в LPR-утилитах BSD

Ошибка форматной строки...

Переполнения буфера в HP-UX

Переполнения буфера в суидных утилитах df root, exrecover root, uusub uucp...

Linux news 11.04.00

Linuxconf 1.17r10 Вышла новая версия мощной утилиты конфигурирования Linux систем. Это т.н. bugfix release. Пофиксен баг в модуле pppdialin ошибка в ppplogin и в модуле inetdconf. Подробнее: http://www.appwatch.com Возрожденная Amiga строит мультимедийную Linux-платформу Gateway строила грандиозн...

CVE-2000-0088

CVE-2000-0088 describes a buffer overflow in the conversion utilities for Word 5 documents (Japanese, Korean and Chinese) that allows a local attacker to execute arbitrary commands. The vulnerability is identified as the "Malformed Conversion Data" issue. The available references indicate a high ...

CVE-2000-0088

Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data" vulnerability...

CVE-1999-0741

CVE-1999-0741 affects QMS CrownNet Unix Utilities for 2060. The vulnerability allows a non-authenticated attacker to gain root access (log on without a password) via the authentication mechanism, enabling complete control over the system. The CVSS data indicates a high-severity, network-exploitab...

CVE-1999-0741

QMS CrownNet Unix Utilities for 2060 allows root to log on without a password...

SCO Unixware 7.1 - pkg Local Privilege Escalation

SCO Unixware 7.1 - pkg Local Privilege Escalation source: https://www.securityfocus.com/bid/850/info Certain versions of SCO's Unixware only version 7.1 was tested ship with a series of package install/removal utilities which due to design issues under the SCO UnixWare operating system may read a...

SCO Unixware 7.1 - 'pkg' Local Privilege Escalation

source: https://www.securityfocus.com/bid/850/info Certain versions of SCO's Unixware only version 7.1 was tested ship with a series of package install/removal utilities which due to design issues under the SCO UnixWare operating system may read any file on the system regardless of their permissi...

Solaris 7.0 - CDE dtmailmailtool Buffer Overflow

Solaris 7.0 - CDE dtmailmailtool Buffer Overflow // source: https://www.securityfocus.com/bid/832/info here are three buffer overflow vulnerabilities in the CDE mail utilities, all of which are installed sgid mail by default. The first is exploited through overrunning a buffer in the Content-Type...