Записи immunix

Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attacke

• pre-auth RCE

caldera · openlinux ebuilder14 нояб. 2000 г.

Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.

• Без аутентификации

immunix · immunix15 мар. 2002 г.

Buffer overflow in url_filename function for wget 1.8.1 allows attackers to cause a denial of service (segmentation fault) and possibly exec

• pre-auth RCE

immunix · immunix16 июн. 2003 г.

Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands.

• pre-auth RCE

mutt · mutt27 июн. 2001 г.

ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, does not drop privileges after

• Без аутентификации

iputils · iputils18 окт. 2000 г.

Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_p

• Без аутентификации

squid · squid web proxy18 июл. 2001 г.

Vulnerability in StackGuard before 1.21 allows remote attackers to bypass the Random and Terminator Canary security mechanisms by using a no

• Без аутентификации

immunix · stackguard9 нояб. 1999 г.

Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redir

immunix · immunix9 янв. 2001 г.

modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters.

• RCE

immunix · immunix9 янв. 2001 г.

Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMI

• RCE

immunix · immunix19 дек. 2000 г.

Format string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges

• Локальное повышение привилегий

immunix · immunix12 авг. 2002 г.

LogLine function in klogd in sysklogd 1.3 in various Linux distributions allows an attacker to cause a denial of service (hang) by causing n

• Без аутентификации
• Отказ в обслуживании

immunix · immunix18 окт. 2001 г.

Buffer overflow in man program in various distributions of Linux allows local user to execute arbitrary code as group man via a long -S opti

• RCE

immunix · immunix20 сент. 2001 г.

Buffer overflows in the (1) outpack or (2) buf variables of ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J

• Локальное повышение привилегий

iputils · iputils18 окт. 2000 г.

glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing se

immunix · immunix26 мар. 2001 г.

Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary fil

immunix · immunix18 окт. 2001 г.

sgml-tools (aka sgmltools) before 1.0.9-15 creates temporary files with insecure permissions, which allows other users to read files that ar

debian · sgml-tools27 июн. 2001 г.

sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack.

immunix · immunix12 мар. 2001 г.

vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack.

immunix · immunix12 мар. 2001 г.

inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations.

caldera · openlinux desktop12 мар. 2001 г.

squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations.

immunix · immunix12 мар. 2001 г.

gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack.

immunix · immunix12 мар. 2001 г.

arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations.

immunix · immunix12 мар. 2001 г.

privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack.

immunix · immunix12 мар. 2001 г.

useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack.

immunix · immunix12 мар. 2001 г.