4713 matches found
HP-UX dtprintinfo buffer overflow
Buffer overflow on oversized DISPLAY variable...
HP-UX 11 CDE DTPrintInfo - Display Environment Variable Buffer Overflow
source: https://www.securityfocus.com/bid/8795/info It has been reported that dtprintinfo, installed setuid root by default, is susceptible to a locally exploitable buffer overflow vulnerability. The condition is triggered when the value of the DISPLAY environment variable is set to a string...
HP-UX "passwd" utility may corrupt password file
Overview The HP-UX "passwd" utility contains a denial-of-service vulnerability. Description The HP-UX "passwd" utility is used to make changes to a user's authentication credentials. A vulnerability in "passwd" may allow a local attacker to corrupt the password file. --- Impact An attacker may be...
Citadel/UX BBS 6.07 Remote Exploit
Exploit for linux platform in category remote exploits ================================== Citadel/UX BBS 6.07 Remote Exploit ================================== / Citadel/UX 6.07 Remote exploit By Carl Livitt, July 2003 / include include include include include include include include include...
Citadel/UX BBS 6.07 - Remote Overflow
/ Citadel/UX 6.07 Remote exploit By Carl Livitt, July 2003 / include include include include include include include include include include include include include include // If you change these, things will probably break. define SIZ 4096 define LEN 298 define RET 0xbfffaf20 define CITADELPORT...
Multiple vulnerabilites in Citadel/UX
Security Vulnerability Advisory Product: Citadel/UX BBS Vulnerable versions: 6.07 probably previous versions Non-vulnerable version: 6.08 Vendor: Citadel www.citadel.org Platforms: Linux/UNIX/Win32 Impact: Remote code execution / privilege escalation Advisory: CLIVITT-2003-4 Authors: Carl Livitt...
Multiple vulnerabilites in Citadel/UX
Security Vulnerability Advisory Product: Citadel/UX BBS Vulnerable versions: 6.07 probably previous versions Non-vulnerable version: 6.08 Vendor: Citadel www.citadel.org Platforms: Linux/UNIX/Win32 Impact: Remote code execution / privilege escalation Advisory: CLIVITT-2003-4 Authors: Carl Livitt...
HP-UX fails to apply standard UNIX filesystem security measures when using OnLineJFS
Overview A vulnerability in OnlineJFS could allow an intruder to gain greater access than expected. Description OnlineJFS "provides the online management of the Journaled File System JFS, a high-integrity, highly available file system supported by HP-UX." According to Hewlett-Packard, there is a...
[LSD] HP-UX security vulnerabilities
Hello, In this letter you will find the result of a brief security audit that we did some time ago for HP-UX platform. We have found 8 vulnerabilities seven local and a remote one. Technical details about all of the vulnerabilities were sent to the HP security team few months ago and in all cases...
HP-UX multiple bugs
Multiple bugs including remote overflow in rpc.yppasswdd...
HP-UX ftpd REST bug
Because of a bug in REST processing value given is treated as a memory address. It makes it possible to read any memory block...
HP-UX FTPD REST Command Remote Arbitrary Memory Disclosure
The remote FTP server seems to be vulnerable to an integer conversion bug when it receives a malformed argument to the 'REST' command. An attacker may exploit this flaw to force the remote FTP daemon to disclose portions of the memory of the remote host. %NASLMINLEVEL 70300 C Tenable Network...
HP-UX FTPD 1.1.214.4 - 'REST' Memory Disclosure
// source: https://www.securityfocus.com/bid/7825/info A vulnerability has been discovered in the HP-UX 11 ftpd daemon. The problem can be triggered using the FTP REST command. By specifying a specially calculated numeric argument to the command, it is possible to disclose the contents of that...
HP-UX FTPD 1.1.214.4 - REST Memory Disclosure
HP-UX FTPD 1.1.214.4 - REST Memory Disclosure // source: https://www.securityfocus.com/bid/7825/info A vulnerability has been discovered in the HP-UX 11 ftpd daemon. The problem can be triggered using the FTP REST command. By specifying a specially calculated numeric argument to the command, it i...
HP-UX "rexec" command vulnerable to buffer overflow when supplied overly long command line argument to "-l" option
Overview A buffer overflow vulnerability in the rexec program supplied in some versions of the HP-UX operating system could allow local users to gain privileged access. Description The rexec program allows local users to execute commands on remote servers. rexec calls the rexec subroutine to act ...
CVE-2003-0333
Multiple buffer overflows in kermit in HP-UX 10.20 and 11.00 C-Kermit 6.0.192 and possibly other versions before 8.0 allow local users to gain privileges via long arguments to 1 ask, 2 askq, 3 define, 4 assign, and 5 getc, some of which may share the same underlying function "doask," a different...
CVE-2003-0333
CVE-2003-0333 describes multiple buffer overflows in HP-UX Kermit (C-Kermit 6.0.192 and possibly earlier than 8.0) affecting HP-UX 10.20 and 11.00. Local users can gain privileges via excessively long arguments to (1) ask, (2) askq, (3) define, (4) assign, and (5) getc), with some invocations pot...
CVE-2003-0333
Multiple buffer overflows in kermit in HP-UX 10.20 and 11.00 C-Kermit 6.0.192 and possibly other versions before 8.0 allow local users to gain privileges via long arguments to 1 ask, 2 askq, 3 define, 4 assign, and 5 getc, some of which may share the same underlying function "doask," a different...
HP-UX "kermit" vulnerable to buffer overflow
Overview HP-UX's implementation of kermit contains a buffer overflow which may allow a local attacker to gain elevated privileges. Description From the Kermit Project:Kermit software offers interactive and scripted file transfer and management, terminal emulation, Unicode-aware character-set...