BSD/OS 2.1 / DG/UX 4.0 / Debian 0.93 / Digital UNIX 4.0 B / FreeBSD 2.1.5 / HP-UX 10.34 / IBM AIX 4.1.5 / NetBSD 1.0/1.1 / NeXTstep 4.0 / SGI IRIX 6.3 / SunOS 4.1.4 - 'rlogin' Local Privilege Escalation

/ source: https://www.securityfocus.com/bid/242/info The SUID rlogin program is used to establish remote sessions. A buffer overflow condition has been found in the rlogin program that may allow an unauthorized user to gain root access. The overflow in particular is in the rlogin code that handle...

BSDOS 2.1 DGUX 4.0 Debian 0.93 Digital UNIX 4.0 B FreeBSD 2.1.5 HP-UX 10.34 IBM AIX 4.1.5 NetBSD 1.01.1 NeXTstep 4.0 SGI IRIX 6.3 SunOS 4.1.4 - rlogin Local Privilege Escalation

BSDOS 2.1 DGUX 4.0 Debian 0.93 Digital UNIX 4.0 B FreeBSD 2.1.5 HP-UX 10.34 IBM AIX 4.1.5 NetBSD 1.01.1 NeXTstep 4.0 SGI IRIX 6.3 SunOS 4.1.4 - rlogin Local Privilege Escalation / source: https://www.securityfocus.com/bid/242/info The SUID rlogin program is used to establish remote sessions. A...

SGI IRIX 6.2 - SpaceWare

source: https://www.securityfocus.com/bid/471/info The SpaceBall game, shipped with Irix 6.2 from Silicon Graphics contains a security hole which could result in the compromise of the root account. By blindly taking the contents of the $HOSTNAME variable, and not placing quotes around it, the...

sudo.bin - NLSPATH Privilege Escalation

sudo.bin - NLSPATH Privilege Escalation include include include include include define PATHSUDO "/usr/bin/sudo.bin" define BUFFERSIZE 1024 define DEFAULTOFFSET 50 ulong getesp asm"movl %esp, %eax"; mainint argc, char argv uchar execshell =...

IBM AIX 3.2.5 - IFS Local Privilege Escalation

IBM AIX 3.2.5 - IFS Local Privilege Escalation source: https://www.securityfocus.com/bid/454/info Under older versions of AIX By changing the IFS enviroment variable to / setuid root programs that use system or popen can be fooled into running user provided programs. !/bin/csh IFS hole in AIX3.2...

CVE-2000-0388

Buffer overflow in FreeBSD libmytinfo library allows local users to execute commands via a long TERMCAP environmental variable...

PT-1990-1010 · Freebsd · Freebsd

Name of the Vulnerable Software and Affected Versions: FreeBSD affected versions not specified Description: A buffer overflow issue exists in the libmytinfo library of FreeBSD, allowing local users to execute commands by setting a long TERMCAP environmental variable. Recommendations: At the momen...

CVE-2026-53614

Local Privilege Escalation via LIBMOUNTFORCEMOUNT2 Environment Variable - nosuid/noexec Bypass in SUID mount8...

CVE-2022-3642

Removed by vendor...

DUO-PSA-2017-002: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2017-002 Publication Date: 2017-05-31 Revision Date: 2017-05-31 Status: Confirmed, Fixed Document Revision: 1 Overview Duo Security has identified an issue in duounix, which, under certain uncommon configurations, could enable attackers to bypass...