Buffer overflow in HP-UX newgrp program.
AFFECTED_PRODUCTS:
HP Hp Ux,
HP Hp Ux,
HP Hp Ux
... (+11)
Buffer overflow in cddbd CD database server allows remote attackers to execute arbitrary commands via a long log message.
AFFECTED_PRODUCTS:
Gracenote Cddbd
Kerberos 4 allows remote attackers to obtain sensitive information via a malformed UDP packet that generates an error string that inadvertently includes the realm name and the last user.
AFFECTED_PRODUCTS:
Kth Kth Kerberos
dxchpwd in Digital Unix (OSF/1) 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.log file.
AFFECTED_PRODUCTS:
Digital Unix
Local users can start Sendmail in daemon mode and gain root privileges.
AFFECTED_PRODUCTS:
Eric Allman Sendmail,
Eric Allman Sendmail,
Eric Allman Sendmail
... (+11)
Vulnerability in ppl in HP-UX 10.x and earlier allows local users to gain root privileges by forcing ppl to core dump.
AFFECTED_PRODUCTS:
HP Hp Ux,
HP Hp Ux
fpkg2swpk in HP-UX allows local users to gain root access.
AFFECTED_PRODUCTS:
HP Hp Ux
Buffer overflow in mstm in HP-UX allows local users to gain root access.
AFFECTED_PRODUCTS:
HP Hp Ux
Indigo Magic System Tour in the SGI system tour package (systour) for IRIX 5.x through 6.3 allows local users to gain root privileges via a Trojan horse .exitops program, which is called by the inst command that is executed by the RemoveSystemTour program.
AFFECTED_PRODUCTS:
Sgi Irix,
Sgi Irix,
Sgi Irix
... (+9)
The WorkMan program can be used to overwrite any file to get root access.
AFFECTED_PRODUCTS:
Sun Sunos
Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Sunos,
FreeBSD Freebsd
... (+18)
PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password.
AFFECTED_PRODUCTS:
Washington University Wu Ftpd
Bash treats any character with a value of 255 as a command separator.
AFFECTED_PRODUCTS:
Sgi Irix,
Red Hat Linux,
Yggdrasil Linux
... (+2)
MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access.
AFFECTED_PRODUCTS:
Eric Allman Sendmail,
Eric Allman Sendmail
HP Remote Watch allows a remote user to gain root access.
AFFECTED_PRODUCTS:
HP Hp Ux
HP-UX gwind program allows users to modify arbitrary files.
AFFECTED_PRODUCTS:
HP Hp Ux,
HP Hp Ux
Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting.
HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation.
AFFECTED_PRODUCTS:
HP Hp Ux,
HP Hp Ux
Denial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to complete the connection, aka SYN flood.
AFFECTED_PRODUCTS:
IBM Aix,
IBM Aix,
IBM Aix
... (+2)
Transarc DCE Distributed File System (DFS) 1.1 for Solaris 2.4 and 2.5 does not properly initialize the grouplist for users who belong to a large number of groups, which could allow those users to gain access to resources that are protected by DFS.
AFFECTED_PRODUCTS:
Transarc Dce Distributed File System
(1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contain shell metacharacters (` back-tick), which can cause the commands enclosed in the directory name to be executed when the shell expands filenames using the \w option in the PS1 variable.
AFFECTED_PRODUCTS:
GNU Bash,
GNU Bash,
GNU Bash
... (+5)
Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.
AFFECTED_PRODUCTS:
Eric Allman Sendmail,
Eric Allman Sendmail,
Eric Allman Sendmail
... (+16)
Vulnerability in a certain system call in SCO UnixWare 2.0.x and 2.1.0 allows local users to access arbitrary files and gain root privileges.
AFFECTED_PRODUCTS:
Sco Unixware,
Sco Unixware
ppl program in HP-UX allows local users to create root files through symlinks.
AFFECTED_PRODUCTS:
HP Hp Ux,
HP Hp Ux,
HP Hp Ux
... (+2)
Sendmail before 8.6.7 allows local users to gain root access via a large value in the debug (-d) command line option.
AFFECTED_PRODUCTS:
Sendmail Sendmail
Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail.
AFFECTED_PRODUCTS:
FreeBSD Freebsd,
Slackware Slackware Linux,
University Of Washington Pine
Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname.
AFFECTED_PRODUCTS:
FreeBSD Freebsd,
IBM Aix,
NetBSD Netbsd
Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root access.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Sunos,
Sun Sunos
... (+10)
fm_fls license server for Adobe Framemaker allows local users to overwrite arbitrary files and gain root access.
AFFECTED_PRODUCTS:
Adobe Framemaker
vold in Solaris 2.x allows local users to gain root access.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Sunos,
Sun Sunos
Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users to overwrite or create files at higher privileges by causing a core dump, e.g. through dmesg.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Solaris
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0032. Reason: This candidate is a duplicate of CVE-1999-0032. Notes: All CVE users should reference CVE-1999-0032 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accident...
Kodak Color Management System (KCMS) on Solaris allows a local user to write to arbitrary files and gain root access.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Sunos
admintool in Solaris allows a local user to write to arbitrary files and gain root access.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Sunos,
Sun Solaris
... (+1)
Local user gains root privileges via buffer overflow in rdist, via lookup() function.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Sunos,
Sun Sunos
... (+24)
A design flaw in the Z-Modem protocol allows the remote sender of a file to execute arbitrary programs on the client, as implemented in rz in the rzsz module of FreeBSD before 2.1.5, and possibly other programs.
AFFECTED_PRODUCTS:
FreeBSD Freebsd
cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files.
AFFECTED_PRODUCTS:
FreeBSD Freebsd,
Debian Debian Linux,
Mandrakesoft Mandrake Linux
... (+7)
The dip program on many Linux systems allows local users to gain root access via a buffer overflow.
AFFECTED_PRODUCTS:
Fred N. Van Kempen Dip
Local user gains root privileges via buffer overflow in rdist, via expstr() function.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Sunos,
Sun Sunos
... (+34)
The convert.bas program in the Novell web server allows a remote attackers to read any file on the system that is internally accessible by the web server.
AFFECTED_PRODUCTS:
Novell Web Server
The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access.
AFFECTED_PRODUCTS:
FreeBSD Freebsd,
FreeBSD Freebsd,
FreeBSD Freebsd
... (+13)
nettune in HP-UX 10.01 and 10.00 is installed setuid root, which allows local users to cause a denial of service by modifying critical networking configuration information.
AFFECTED_PRODUCTS:
HP Hp Ux,
HP Hp Ux
Vulnerability in a kernel error handling routine in SCO OpenServer 5.0.2 and earlier, and SCO Internet FastStart 1.0, allows local users to gain root privileges.
AFFECTED_PRODUCTS:
Sco Openserver,
Sco Openserver,
Sco Internet Faststart
Perl, sh, csh, or other shell interpreters are installed in the cgi-bin directory on a WWW site, which allows remote attackers to execute arbitrary commands.
The permissions for a system-critical NIS+ table (e.g. passwd) are inappropriate.
Manual page reader (man) in FreeBSD 2.2 and earlier allows local users to gain privileges via a sequence of commands.
AFFECTED_PRODUCTS:
FreeBSD Freebsd,
FreeBSD Freebsd,
FreeBSD Freebsd
... (+1)
Vulnerability in union file system in FreeBSD 2.2 and earlier, and possibly other operating systems, allows local users to cause a denial of service (system reload) via a series of certain mount_union commands.
AFFECTED_PRODUCTS:
FreeBSD Freebsd,
FreeBSD Freebsd,
FreeBSD Freebsd
... (+3)
Delete or create a file via rpc.statd, due to invalid information.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Sunos,
Sun Sunos
... (+15)
pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Sunos,
Sun Sunos
... (+14)
dxconsole in DEC OSF/1 3.2C and earlier allows local users to read arbitrary files by specifying the file with the -file parameter.
AFFECTED_PRODUCTS:
Digital Osf 1