5 matches found
CVE-2003-0580
CVE-2003-0580 : A buffer overflow in uvadmsh affects IBM U2 UniVerse 10.0.0.9 and earlier, allowing the local uvadm user to execute arbitrary code via a long -uv.install command line argument. The vulnerability is caused by overflowing a buffer when handling the -uv.install parameter, with the do...
IBM UniVerse 10.0.0.9 - 'uvadmsh' Local Privilege Escalation
source: https://www.securityfocus.com/bid/8203/info A vulnerability has been reported in the IBM U2 UniVerse uvadmsh program that could permit the uvadm user to execute arbitrary code with elevated privileges. The -uv.install option of the vulnerable program allows a user to specify an arbitrary...
IBM U2 UniVerse 10.0.0.9 - UVADMSH Buffer Overflow
IBM U2 UniVerse 10.0.0.9 - UVADMSH Buffer Overflow source: https://www.securityfocus.com/bid/8209/info Under certain configurations, UniVerse allows the 'uvadm' user to perform certain administration tasks for the software. It has been reported that the uvadmsh binary does not perform bounds...
[Full-Disclosure] SRT2003-07-07-0833 - IBM U2 UniVerse users with uvadm rights can take root via uvadmsh
Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...
IBM U2 UniVerse 10.0.0.9 - UVADMSH Buffer Overflow
source: https://www.securityfocus.com/bid/8209/info Under certain configurations, UniVerse allows the 'uvadm' user to perform certain administration tasks for the software. It has been reported that the uvadmsh binary does not perform bounds checking when parsing command-line arguments. Because...