CVE-2006-0161

Technical details about CVE-2006-0161 are not provided in the connected documents. The initial description notes uncertainty; no affected versions, impact, or remediation are specified here. Monitor for updates.

CVE-2001-1541

Buffer overflow in Unix-to-Unix Copy Protocol UUCP in BSDI BSD/OS 3.0 through 4.2 allows local users to execute arbitrary code via a long command line argument...

CVE-2001-1541

CVE-2001-1541 describes a buffer overflow in UUCP of BSDI BSD/OS 3.0–4.2 that lets a local attacker execute arbitrary code via a long command line argument. The vulnerability is due to unsafe handling in UUCP, enabling code execution with local access; the impact is full confidentiality, integrit...

CVE-2002-1787

CVE-2002-1787 affects SGI IRIX 6.5–6.5.17; the vulnerability is a buffer overflow in the uux component of the eoe.sw.uucp package. The underlying root cause is improper handling of input causing a overflow, enabling local users to execute arbitrary code. References point to SGI advisories and pat...

CVE-2002-1604

Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to 1 csh, 2 dtsession, 3 dxsysinfo, 4 imapd, 5 inc, 6 uucp, 7 uux, 8 rdist, or 9 deliver...

CVE-2004-1359

Multiple buffer overflows in uucp for Sun Solaris 2.6, 7, 8, and 9 allow local users to execute arbitrary code as the uucp user...

CVE-2004-1359

CVE-2004-1359 affects Sun Solaris with uucp on versions 2.6, 7, 8, and 9. The vulnerability arises from multiple buffer overflows in uucp, allowing local users to execute arbitrary code as the uucp user. The connected documents confirm the affected component and the local-privilege impact; explic...

Debian DSA-129-1 : uucp - remote denial of service

We have received reports that in.uucpd, an authentication agent in the uucp package, does not properly terminate certain long input strings. This has been corrected in uucp package version 1.06.1-11potato3 for Debian 2.2 potato and in version 1.06.1-18 for the upcoming woody release. %NASLMINLEVE...

Debian DSA-079-2 : uucp - uucp uid/gid access

Zenith Parsec discovered a security hole in Taylor UUCP 1.06.1. It permits a local user to copy any file to anywhere which is writable by the uucp uid, which effectively means that a local user can completely subvert the UUCP subsystem, including stealing mail, etc. If a remote user with UUCP...

UUCP Server Detection

Binary data 1901.prm...

Mandrake Linux Security Advisory : uucp (MDKSA-2001:078)

Zen Parse discovered that an argument handling problem that exists in the uucp package can allow a local attacker to gain access to the uucp user or group. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake Linu...

Solaris 9 (sparc) : 113322-04

SunOS 5.9: uucp patch. Date this patch was last updated by Sun : Feb/25/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid1353...

CVE-2001-0873

uuxqt in Taylor UUCP package does not properly remove dangerous long options, which allows local users to gain privileges by calling uux and specifying an alternate configuration file with the --config option...

CVE-2001-0873

The CVE-2001-0873 issue affects Taylor UUCP’s uuxqt, where long command-line options are not properly filtered, enabling a local user to gain privileges by invoking uux with a malicious --config file. Public documents confirm the vulnerability primarily as a local-exploit in uuxqt, with Debian (u...

CVE-2002-1127

Buffer overflow in uucp in Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long source -s command line parameter...

CVE-2002-0912

in.uucpd UUCP server in Debian GNU/Linux 2.2, and possibly other operating systems, does not properly terminate long strings, which allows remote attackers to cause a denial of service, possibly due to a buffer overflow...

CVE-2002-1127

Buffer overflow in uucp in Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long source -s command line parameter...

CVE-2002-1127

CVE-2002-1127: Buffer overflow in uucp for Compaq Tru64/OSF1 3.x enables local users to execute arbitrary code via a long source (-s) argument. Root cause: unchecked buffer handling in uucp. Affected: Tru64/OSF1 3.x; component: uucp. Impact: local code execution; data confidentiality/integrity/av...

CVE-2002-0912

CVE-2002-0912 affects in.uucpd (UUCP server) in Debian GNU/Linux 2.2; long input strings were not terminated properly, enabling remote denial of service (likely via buffer overflow). Debian DSA-129-1 fixes uucp with updated versions 1.06.1-11potato3 (potato) and 1.06.1-18 (woody); OpenVAS notes t...

CVE-2002-0912

in.uucpd UUCP server in Debian GNU/Linux 2.2, and possibly other operating systems, does not properly terminate long strings, which allows remote attackers to cause a denial of service, possibly due to a buffer overflow...