Open Unix X-Server MIT-SHM module shared memory access

It's possible to gain read/write access to any shared memory segment...

Security Update: [CSSA-2002-SCO.14] Open UNIX 8.0.0 UnixWare 7.1.1 : X server allows access to any shared memory on the system

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: Open UNIX 8.0.0 UnixWare 7.1.1 : X server allows access to any shared memory on the system Advisory number: CSSA-2002-SCO.14 Issue date: 2002 April 08 Cross...

DoS против X-Сервера через Mozilla

Длинная строка из 20 приводит к краху X-Сервера...

Ximian Mozilla: The 2618 Bug

NOTE TO THE MODERATOR: This was sent yesterday but i guess didn't make it since this doesn't seem to affect a redhat itself, it affects the mozilla packages distrbuted by Ximian: The test system look like: bash rpm -qa | grep mozilla mozilla-0.9.8-1.ximian.2 mozilla-mail-0.9.8-1.ximian.2...

SCO OpenServer 5.0.x - StartX Weak XHost Permissions

SCO OpenServer 5.0.x - StartX Weak XHost Permissions source: https://www.securityfocus.com/bid/2731/info OpenServer is a Unix based operating system distributed by Santa Cruz Operations. A problem in access control of the X server could allow a local user to gain elevated privileges. When the X...

MDKSA-2001:029 - Mesa update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Linux-Mandrake Security Update Advisory Package name: Mesa Date: March 13th, 2001 Advisory ID: MDKSA-2001:029 Affected versions: 7.2 Problem Description: Ben Collins identified a temporary file race in the Utah-glx component of the Mesa package which...

CVE-2000-1071

Technical details (affected product, root cause, impact, and fix) are not publicly available in the provided documents. Monitor official CVE records and vendor advisories for updates.

CVE-2000-1071

The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which allows remote attackers to monitor X Windows events and gain privileges...

CVE-2000-1071

The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which allows remote attackers to monitor X Windows events and gain privileges...

CVE-2000-0337

CVE-2000-0337 describes a buffer overflow in the Xsun X server component of Solaris 7. The vulnerability allows local users to gain root privileges by supplying an excessively long -dev parameter. The available documents identify the affected system as Solaris 7 and the vulnerable component as th...

CVE-2000-0337

Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter...

X 11.03.3.33.3.43.3.53.3.64.0 - libX11 _XAsyncReply() Stack Corruption

X 11.03.3.33.3.43.3.53.3.64.0 - libX11 XAsyncReply Stack Corruption // source: https://www.securityfocus.com/bid/1408/info A vulnerability exists in the XAsyncReply function of libX11. This function utilizes size information retrieved as part of a client supplied packet. This value is a signed...

Linux news 23.05.00

Linux 2.2.16pre4 Alan Cox выпустил новую pre-версию следующего стабильного ядра Linux: 2.2.16pre4. Подробнее: http://www.lwn.net/daily/2.2.16pre4.html Kernel Traffic 68 Вышел очередной Kernel Traffic за номером 68. Подробнее: http://linuxtoday.com/newsstory.php3?ltsn=2000-05-22-003-04-OS-KN GNU...

CVE-2000-0337

Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter...

Локальный root через X-сервер

Переполнение буфера при вызове XFree86 с параметром -xkbmap и длинным аргументом. При этом аргумент может содержать только текстовые символы, что затрудняет эксплоит, но не делает его невозможным...

CVE-1999-0526

An X server's access control is disabled e.g. through an "xhost +" command and allows anyone to connect to the server...

CVE-1999-0413

CVE-1999-0413 describes a buffer overflow in the SGI X server that enables a local user to gain root privileges via the X server font path. The Red Hat and CVE records corroborate the same core issue: a local-exploit path that could lead to full compromise on affected systems running SGI X server...

CVE-1999-0413

A buffer overflow in the SGI X server allows local users to gain root access through the X server font path...

CVE-1999-0526

CVE-1999-0526 relates to an X server with access control disabled (e.g., via xhost +), allowing any host to connect to the X server. The vulnerability is documented with a high impact: confidentiality, integrity, and availability could be compromised through to keystroke exposure and session take...

ksrt.accelerated-x.bof.txt

Date: Sat, 26 Jun 1999 15:40:54 -0400 From: "KSRT Contact Account" To: [email protected] Subject: KSRT 011: Accelerated-X KSRT Advisory 011 Date: June 25, 1999 ID : accelx-bo-011 Affected Program: Xi Graphics, Inc.'s Accelerated-X Server 4.x, 5.x and possibly earlier versions. Author: Jordan...