5 matches found
CVE-2001-0112
The CVE-2001-0112 entry concerns the splitvt utility: multiple buffer overflows in splitvt prior to 1.6.5 allow local users to execute arbitrary commands. Public details in the connected documents confirm affected software (splitvt) and the vulnerable version range (before 1.6.5), with Debian and...
CVE-1999-0316
CVE-1999-0316 describes a buffer overflow in the Linux splitvt command that allows local users to gain root access. The linked Red Hat, CVE listings, and PTsecurity entry corroborate local privilege escalation via an overflow in splitvt. The PTsecurity entry notes that affected versions are not s...
CVE-2001-0111
CVE-2001-0111 : The vulnerability affects the splitvt utility (before 1.6.5). It is a format-string flaw that can allow a local attacker to run arbitrary commands via the -rcfile argument. Debian’s DSA-014-2 describes a buffer overflow/format-string attack with root access risk; remediation is up...
CVE-2008-0162
CVE-2008-0162 affects SplitVT; in versions 1.6.6 and earlier, misc.c does not drop group privileges before executing xprop, enabling a local attacker to gain the utmp group privileges. Affected: splitvt prior to upgrade; root cause is privilege retention during xprop invocation. Impact is local p...
CVE-2000-0467
The CVE-2000-0467 entry documents a buffer overflow in Linux splitvt 1.6.3 and earlier, enabling local users to gain root privileges via a long password in the screen locking function. Affected component: splitvt (Linux). Root cause: buffer overflow in password handling within screen lock. Impact...