Home arrow Vendor Advisories
Friday, 21 November 2008
 
spacer.png, 0 kB
spacer.png, 0 kB
spacer.png, 0 kB
Vendor Advisories
Sendmail debug Arbitrary Command Execution
Open Source Vulnerability Database
Monday, 07 November 1988
Sendmail contains a flaw that may allow a remote attacker to execute commands without authentication. The issue is triggered when an attacker connects to the SMTP service (port 25), and issues the 'debug' command. If enable, this may allow an attacker to pipe...
Read more...
 
BSD lpr Print Arbitrary Privileged File
Open Source Vulnerability Database
Friday, 10 April 1987
Operating systems which had their kernel reorganized to accomodate the network file system (NFS) and are based on 4.3 BSD, specifically SunOS and Pyramid, contain a flaw that may lead to an unauthorized information disclosure. The issue is triggered when a malicious user causes...
Read more...
 
BSD ptrace() Malformed PID Local DoS
Open Source Vulnerability Database
Wednesday, 25 February 1987
BSD contains a flaw that may allow a local denial of service. The issue is triggered when a malicious user calls the ptrace function with a negative process ID number, and will result in loss of availability for the platform.
Read more...
 
Sendmail Unspecified Arbitrary File Write
Open Source Vulnerability Database
Friday, 24 October 1986
Sendmail contains a flaw that may allow an attacker to write to arbitrary files. No further details have been provided.
Read more...
 
BSD on VAX passwd Lockfile File Size Limit Local DoS
Open Source Vulnerability Database
Thursday, 26 June 1986
BSD contains a flaw that may allow a local denial of service. The issue is triggered when a malicious user limits filesizes to 1k before using passwd. The passwd program will copy the first 1k of data from /etc/passwd into the lock file /etc/ptmp. Once 1k of data is copied,...
Read more...
 
BSD uusend Arbitrary Privileged Command Execution
Open Source Vulnerability Database
Monday, 19 May 1986
BSD contains a flaw that may allow a malicious user to gain access to unauthorized privileges and/or cause an unauthorized information disclosure. The issue is triggered when uusend fails to perform access checking, such as check the USERFILE file or check file permissions,...
Read more...
 
BSD kern_sig.c sigvec() Crafted Address Local DoS
Open Source Vulnerability Database
Tuesday, 13 May 1986
BSD contains a flaw that may allow a local denial of service. The issue is triggered when addresses passed to sigvec() (as in user level signal() handler addreses) are not properly validated by the kernel before being used, resulting in a loss of availability for the platform.
Read more...
 
BSD mail Mail Append Arbitrary File Modification
Open Source Vulnerability Database
Wednesday, 31 July 1985
BSD contains a flaw that may allow a malicious local user to modify arbitrary files on the system. The issue is triggered when a malicious user mails himself a root passwd entry that /usr/ucb/mail will append to /etc/passwd, resulting in a loss of integrity.
Read more...
 
BSD pseudo-tty Cross Session Information Disclosure
Open Source Vulnerability Database
Thursday, 18 July 1985
BSD contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when a malicious user uses the cat command to view the output of a victim user terminal, resulting in a loss of confidentiality.
Read more...
 
BSD f_count Wrapped Count Arbitrary Privilege Escalation
Open Source Vulnerability Database
Monday, 03 June 1985
BSD contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when a malicious user creates a trival program to open a file more than 20 times, with forking and repeating. When this program creates more than 20 processes,...
Read more...
 
<< Start < Prev 441 442 443 444 445 446 Next > End >>

Results 4421 - 4430 of 4451
spacer.png, 0 kB
     

© 2008 Intellect Information Technology Pty Ltd, Melbourne, Australia.

This page was loaded in 0.048 seconds.