IBM AIX uucp工具本地权限提升漏洞

IBM AIX是一款商业性质的UNIX操作系统。 AIX的uucp工具实现上存在漏洞，本地攻击者可能利用此漏洞uucp进程权限执行任意命令。 IBM AIX 5.3 IBM AIX 5.2 临时解决方法： 删除/usr/bin/uucp的setuid位： chmod 555 /usr/bin/uucp 厂商补丁： IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： ftp://aix.software.ibm.com/aix/efixes/security/uucpifix.tar.Z...

[SA22105] IBM AIX uucp Privilege Escalation Vulnerability

TITLE: IBM AIX uucp Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA22105 VERIFY ADVISORY: http://secunia.com/advisories/22105/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system OPERATING SYSTEM: AIX 5.x http://secunia.com/product/213/ DESCRIPTION: A vulnerability...

IBM AIX utilities multiple security vulnerabilities

Xclock buffer overflow; utape, cfgmgr, rdist, uucp, snappd, named8 and mkvg privilege escalation; slip.login and Inventory Scout arbitrary file overwrite...

CVE-2006-5007

CVE-2006-5007 affects IBM AIX 5.2.0 and 5.3.0, where the uucp component has an untrusted search path vulnerability that can allow local privilege escalation via a Trojan horse using uux. Affected package is bos.net.uucp; root cause relates to insecure path handling in the uucp utilities. Impact i...

CVE-2006-5007: Undefined Security Weakness

Untrusted search path vulnerability in uucp in IBM AIX 5.2.0 and 5.3.0 allows local users to local users to gain privileges via a Trojan horse program involving uux...

AIX 5.1 : IY28158

The remote host is missing AIX Critical Security Patch number IY28158 SECURITY: Buffer overflow vulnerability in uucp. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Authentication flaw

Unspecified vulnerability in uucp in Sun Solaris 8 and 9 has unknown impact and attack vectors. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this is related to CVE-2004-0780...

CVE-2006-0161

Unspecified vulnerability in uucp in Sun Solaris 8 and 9 has unknown impact and attack vectors. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this is related to CVE-2004-0780...

CVE-2006-0161

Technical details about CVE-2006-0161 are not provided in the connected documents. The initial description notes uncertainty; no affected versions, impact, or remediation are specified here. Monitor for updates.

CVE-2006-0161

Unspecified vulnerability in uucp in Sun Solaris 8 and 9 has unknown impact and attack vectors. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this is related to CVE-2004-0780...

CVE-2006-0161: Undefined Security Weakness

Unspecified vulnerability in uucp in Sun Solaris 8 and 9 has unknown impact and attack vectors. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this is related to CVE-2004-0780...

CVE-2001-1541

Buffer overflow in Unix-to-Unix Copy Protocol UUCP in BSDI BSD/OS 3.0 through 4.2 allows local users to execute arbitrary code via a long command line argument...

CVE-2001-1541

CVE-2001-1541 describes a buffer overflow in UUCP of BSDI BSD/OS 3.0–4.2 that lets a local attacker execute arbitrary code via a long command line argument. The vulnerability is due to unsafe handling in UUCP, enabling code execution with local access; the impact is full confidentiality, integrit...

CVE-2002-1787

CVE-2002-1787 affects SGI IRIX 6.5–6.5.17; the vulnerability is a buffer overflow in the uux component of the eoe.sw.uucp package. The underlying root cause is improper handling of input causing a overflow, enabling local users to execute arbitrary code. References point to SGI advisories and pat...

CVE-2002-1604

Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to 1 csh, 2 dtsession, 3 dxsysinfo, 4 imapd, 5 inc, 6 uucp, 7 uux, 8 rdist, or 9 deliver...

CVE-2002-1604: Undefined Security Weakness

Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to 1 csh, 2 dtsession, 3 dxsysinfo, 4 imapd, 5 inc, 6 uucp, 7 uux, 8 rdist, or 9 deliver...

CVE-2004-1359

CVE-2004-1359 affects Sun Solaris with uucp on versions 2.6, 7, 8, and 9. The vulnerability arises from multiple buffer overflows in uucp, allowing local users to execute arbitrary code as the uucp user. The connected documents confirm the affected component and the local-privilege impact; explic...

CVE-2004-1359

Multiple buffer overflows in uucp for Sun Solaris 2.6, 7, 8, and 9 allow local users to execute arbitrary code as the uucp user...

CVE-2004-1359: Undefined Security Weakness

Multiple buffer overflows in uucp for Sun Solaris 2.6, 7, 8, and 9 allow local users to execute arbitrary code as the uucp user...

Debian DSA-129-1 : uucp - remote denial of service

We have received reports that in.uucpd, an authentication agent in the uucp package, does not properly terminate certain long input strings. This has been corrected in uucp package version 1.06.1-11potato3 for Debian 2.2 potato and in version 1.06.1-18 for the upcoming woody release. %NASLMINLEVE...