VMS 4.0 through 5.3 allows local users to gain privileges via the ANALYZE/PROCESS_DUMP dcl command.
AFFECTED_PRODUCTS:
Digital Vms
BuildDisk program on NeXT systems before 2.0 does not prompt users for the root password, which allows local users to gain root privileges.
AFFECTED_PRODUCTS:
Next Next
Vulnerability in NeXT 1.0a and 1.0 with publicly accessible printers allows local users to gain privileges via a combination of the npd program and weak directory permissions.
AFFECTED_PRODUCTS:
Next Next,
Next Next
Vulnerability in restore0.9 installation script in NeXT 1.0a and 1.0 allows local users to gain root privileges.
AFFECTED_PRODUCTS:
Next Next,
Next Nex
The SunView (SunTools) selection_svc facility allows remote users to read files.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Sunos,
Sun Sunos
... (+4)
Buffer overflow in FreeBSD libmytinfo library allows local users to execute commands via a long TERMCAP environmental variable.
AFFECTED_PRODUCTS:
FreeBSD Freebsd,
FreeBSD Freebsd,
FreeBSD Freebsd
... (+2)
Certain NFS servers allow users to use mknod to gain privileges by creating a writable kmem device and setting the UID to 0.
AFFECTED_PRODUCTS:
Sun Nfs
Vulnerability in SMI Sendmail 4.0 and earlier, on SunOS up to 4.0.3, allows remote attackers to access user bin.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Sunos,
Sun Sunos
... (+3)
Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, possibly related to the configuration of the nobody user.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Sunos,
Sun Sunos
... (+2)
Vulnerability in restore in SunOS 4.0.3 and earlier allows local users to gain privileges.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Sunos,
Sun Sunos
Buffer overflow in passwd in BSD based operating systems 4.3 and earlier allows local users to gain root privileges by specifying a long shell or GECOS field.
AFFECTED_PRODUCTS:
BSD Bsd,
BSD Bsd
CWD ~root command in ftpd allows root access.
AFFECTED_PRODUCTS:
Ftp Ftp,
Ftpcd Ftpcd
The debug command in Sendmail is enabled, allowing attackers to execute commands as root.
AFFECTED_PRODUCTS:
Eric Allman Sendmail