swinstall and swmodify commands in SD-UX package in HP-UX systems allow local users to create or overwrite arbitrary files to gain root access.
AFFECTED_PRODUCTS:
HP Hp Ux
Buffer overflow in ppp program in FreeBSD 2.1 and earlier allows local users to gain privileges via a long HOME environment variable.
AFFECTED_PRODUCTS:
FreeBSD Freebsd,
FreeBSD Freebsd,
FreeBSD Freebsd
... (+3)
Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Sunos,
Sun Sunos
... (+15)
Buffer overflow in chfn command in HP-UX 9.X through 10.20 allows local users to gain privileges via a long command line argument.
AFFECTED_PRODUCTS:
HP Hp Ux,
HP Hp Ux,
HP Hp Ux
Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable.
AFFECTED_PRODUCTS:
FreeBSD Freebsd,
Red Hat Linux,
Bsdi Bsd Os
... (+2)
List of arbitrary files on Web host via nph-test-cgi script.
AFFECTED_PRODUCTS:
Apache HTTP Server,
Apache HTTP Server,
Apache HTTP Server
... (+8)
Sendmail decode alias can be used to overwrite sensitive files.
AFFECTED_PRODUCTS:
FreeBSD Freebsd,
FreeBSD Freebsd,
FreeBSD Freebsd
... (+5)
Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.
AFFECTED_PRODUCTS:
IBM Aix,
IBM Aix,
IBM Aix
Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files (iconbook and searchbook).
AFFECTED_PRODUCTS:
Sgi Irix,
Sgi Irix,
Sgi Irix
... (+7)
Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.
AFFECTED_PRODUCTS:
Red Hat Linux,
Red Hat Linux,
Bsdi Bsd Os
... (+11)
fsdump command in IRIX allows local users to obtain root access by modifying sensitive files.
AFFECTED_PRODUCTS:
Sgi Irix,
Sgi Irix,
Sgi Irix
... (+5)
Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.
AFFECTED_PRODUCTS:
Eric Allman Sendmail,
Eric Allman Sendmail,
Eric Allman Sendmail
... (+26)
Buffer overflow in HP-UX newgrp program.
AFFECTED_PRODUCTS:
HP Hp Ux,
HP Hp Ux,
HP Hp Ux
... (+11)
Buffer overflow in cddbd CD database server allows remote attackers to execute arbitrary commands via a long log message.
AFFECTED_PRODUCTS:
Gracenote Cddbd
Kerberos 4 allows remote attackers to obtain sensitive information via a malformed UDP packet that generates an error string that inadvertently includes the realm name and the last user.
AFFECTED_PRODUCTS:
Kth Kth Kerberos
dxchpwd in Digital Unix (OSF/1) 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.log file.
AFFECTED_PRODUCTS:
Digital Unix
Local users can start Sendmail in daemon mode and gain root privileges.
AFFECTED_PRODUCTS:
Eric Allman Sendmail,
Eric Allman Sendmail,
Eric Allman Sendmail
... (+11)
Vulnerability in ppl in HP-UX 10.x and earlier allows local users to gain root privileges by forcing ppl to core dump.
AFFECTED_PRODUCTS:
HP Hp Ux,
HP Hp Ux
fpkg2swpk in HP-UX allows local users to gain root access.
AFFECTED_PRODUCTS:
HP Hp Ux
Buffer overflow in mstm in HP-UX allows local users to gain root access.
AFFECTED_PRODUCTS:
HP Hp Ux
Indigo Magic System Tour in the SGI system tour package (systour) for IRIX 5.x through 6.3 allows local users to gain root privileges via a Trojan horse .exitops program, which is called by the inst command that is executed by the RemoveSystemTour program.
AFFECTED_PRODUCTS:
Sgi Irix,
Sgi Irix,
Sgi Irix
... (+9)
The WorkMan program can be used to overwrite any file to get root access.
AFFECTED_PRODUCTS:
Sun Sunos
Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Sunos,
FreeBSD Freebsd
... (+18)
PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password.
AFFECTED_PRODUCTS:
Washington University Wu Ftpd
Bash treats any character with a value of 255 as a command separator.
AFFECTED_PRODUCTS:
Sgi Irix,
Red Hat Linux,
Yggdrasil Linux
... (+2)
MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access.
AFFECTED_PRODUCTS:
Eric Allman Sendmail,
Eric Allman Sendmail
HP Remote Watch allows a remote user to gain root access.
AFFECTED_PRODUCTS:
HP Hp Ux
HP-UX gwind program allows users to modify arbitrary files.
AFFECTED_PRODUCTS:
HP Hp Ux,
HP Hp Ux
Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting.
HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation.
AFFECTED_PRODUCTS:
HP Hp Ux,
HP Hp Ux
Denial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to complete the connection, aka SYN flood.
AFFECTED_PRODUCTS:
IBM Aix,
IBM Aix,
IBM Aix
... (+2)
Transarc DCE Distributed File System (DFS) 1.1 for Solaris 2.4 and 2.5 does not properly initialize the grouplist for users who belong to a large number of groups, which could allow those users to gain access to resources that are protected by DFS.
AFFECTED_PRODUCTS:
Transarc Dce Distributed File System
(1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contain shell metacharacters (` back-tick), which can cause the commands enclosed in the directory name to be executed when the shell expands filenames using the \w option in the PS1 variable.
AFFECTED_PRODUCTS:
GNU Bash,
GNU Bash,
GNU Bash
... (+5)
Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.
AFFECTED_PRODUCTS:
Eric Allman Sendmail,
Eric Allman Sendmail,
Eric Allman Sendmail
... (+16)
Vulnerability in a certain system call in SCO UnixWare 2.0.x and 2.1.0 allows local users to access arbitrary files and gain root privileges.
AFFECTED_PRODUCTS:
Sco Unixware,
Sco Unixware
ppl program in HP-UX allows local users to create root files through symlinks.
AFFECTED_PRODUCTS:
HP Hp Ux,
HP Hp Ux,
HP Hp Ux
... (+2)
Sendmail before 8.6.7 allows local users to gain root access via a large value in the debug (-d) command line option.
AFFECTED_PRODUCTS:
Sendmail Sendmail
Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail.
AFFECTED_PRODUCTS:
FreeBSD Freebsd,
Slackware Slackware Linux,
University Of Washington Pine
Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname.
AFFECTED_PRODUCTS:
FreeBSD Freebsd,
IBM Aix,
NetBSD Netbsd
Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root access.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Sunos,
Sun Sunos
... (+10)
fm_fls license server for Adobe Framemaker allows local users to overwrite arbitrary files and gain root access.
AFFECTED_PRODUCTS:
Adobe Framemaker
vold in Solaris 2.x allows local users to gain root access.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Sunos,
Sun Sunos
Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users to overwrite or create files at higher privileges by causing a core dump, e.g. through dmesg.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Solaris
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0032. Reason: This candidate is a duplicate of CVE-1999-0032. Notes: All CVE users should reference CVE-1999-0032 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accident...
Kodak Color Management System (KCMS) on Solaris allows a local user to write to arbitrary files and gain root access.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Sunos
admintool in Solaris allows a local user to write to arbitrary files and gain root access.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Sunos,
Sun Solaris
... (+1)
Local user gains root privileges via buffer overflow in rdist, via lookup() function.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Sunos,
Sun Sunos
... (+24)
A design flaw in the Z-Modem protocol allows the remote sender of a file to execute arbitrary programs on the client, as implemented in rz in the rzsz module of FreeBSD before 2.1.5, and possibly other programs.
AFFECTED_PRODUCTS:
FreeBSD Freebsd
cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files.
AFFECTED_PRODUCTS:
FreeBSD Freebsd,
Debian Debian Linux,
Mandrakesoft Mandrake Linux
... (+7)
The dip program on many Linux systems allows local users to gain root access via a buffer overflow.
AFFECTED_PRODUCTS:
Fred N. Van Kempen Dip