IBM U2 UniVerse 10.0 .0.9 UVADMSH Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8209/info Under certain configurations, UniVerse allows the 'uvadm' user to perform certain administration tasks for the software. It has been reported that the uvadmsh binary does not perform bounds checking when parsing...

IBM UniVerse 10.0 .0.9 uvadmsh Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8203/info A vulnerability has been reported in the IBM U2 UniVerse uvadmsh program that could permit the uvadm user to execute arbitrary code with elevated privileges. The -uv.install option of the vulnerable program allo...

CVE-2003-0579

CVE-2003-0579 affects IBM U2 UniVerse before or at version 10.0.0.9, where uvadmsh trusts a user-supplied -uv.install command line option to locate and run uv.install. The flaw lets a local attacker cause execution of uv.install by supplying a pathname under the attacker’s control, enabling privi...

CVE-2003-0579: Undefined Security Weakness

uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier trusts the user-supplied -uv.install command line option to find and execute the uv.install program, which allows local users to gain privileges by providing a pathname that is under control of the user...

CVE-2003-0580: Undefined Security Weakness

Buffer overflow in uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier allows the uvadm user to execute arbitrary code via a long -uv.install command line argument...

IBM UniVerse 10.0.0.9 - uvadmsh Local Privilege Escalation

IBM UniVerse 10.0.0.9 - uvadmsh Local Privilege Escalation source: https://www.securityfocus.com/bid/8203/info A vulnerability has been reported in the IBM U2 UniVerse uvadmsh program that could permit the uvadm user to execute arbitrary code with elevated privileges. The -uv.install option of th...