68 matches found
CVE-2000-0763
CVE-2000-0763 concerns xlockmore and xlockf, where improper cleansing of user-supplied format strings can enable local users to gain root privileges through the -d option. The NVD entry confirms the impact as local privilege escalation with complete confidentiality, integrity, and availability im...
CVE-2000-0763
xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privileges via the -d option...
FreeBSD-SA-00:44.xlock
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:44 Security Advisory FreeBSD, Inc. Topic: xlockmore port allows reading of password file Category: ports Module: xlockmore Announced: 2000-08-28 Credits: bind Affects:...
[SECURITY] New version of xlockmore/xlockmore-gl released
Package: xlockmore, xlockmore-gl Vulnerability type: local exploit Debian-specific: no There is a format string bug in all versions of xlockmore/xlockmore-gl. Debian 2.1 slink installs xlock setgid by default, and this exploit can be used to gain read access to the shadow file. We recommend...
[SECURITY] New version of xlockmore/xlockmore-gl released
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Michael Stone August 16, 2000 - ------------------------------------------------------------------------ Package: xlockmore, xlockmore-gl...
CVE-2000-0455
Buffer overflow in xlockmore xlock program version 4.16 and earlier allows local users to read sensitive data from memory via a long -mode option...
CVE-2000-0455
CVE-2000-0455: A buffer overflow in the xlockmore xlock program (versions 4.16 and earlier) allows local users to read sensitive data from memory via a long -mode option. Affected component is xlockmore; root cause is a memory safety overrun in handling the -mode argument. Impact documented as pa...
