Brock Tellier

CVE-1999-0828 EXPLOITDB c WORKING POC

UnixWare - Info Disclosure

UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission.

View Code

EIP-2026-114707 EXPLOITDB c WORKING POC

SCO Open Server 5.0.5 - cancel Buffer Overflow

View Code

CVE-1999-0864 EXPLOITDB bash WORKING POC

UnixWare - Local Privilege Escalation

UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file.

View Code

CVE-1999-0836 EXPLOITDB perl WORKING POC

UnixWare - Path Traversal

UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.

View Code

CVE-1999-0866 EXPLOITDB c WORKING POC

SCO Unixware - Buffer Overflow

Buffer overflow in UnixWare xauto program allows local users to gain root privilege.

View Code

CVE-1999-0979 EXPLOITDB c WORKING POC

SCO UnixWare - Privilege Escalation

The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into _init before the privileged process is executed.

View Code

CVE-1999-0825 EXPLOITDB text WORKING POC

UnixWare - Info Disclosure

The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail.

View Code

CVE-1999-0828 EXPLOITDB text WORKING POC

UnixWare - Info Disclosure

UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission.

View Code

CVE-1999-0828 EXPLOITDB c WORKING POC

UnixWare - Info Disclosure

UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission.

View Code

CVE-1999-0988 EXPLOITDB c WORKING POC

UnixWare pkgtrans - Info Disclosure

UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack.

View Code

CVE-2000-0026 EXPLOITDB c WORKING POC

Windowmaker Wmmon - Buffer Overflow

Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string.

View Code

CVE-2000-0032 EXPLOITDB text WORKING POC

Solaris - DoS

Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database.

View Code

CVE-1999-1014 EXPLOITDB c WORKING POC

SUN Solaris - Buffer Overflow

Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument.

View Code

CVE-1999-1340 EXPLOITDB c WORKING POC

hylafax 4.0.2 - Buffer Overflow

Buffer overflow in faxalter in hylafax 4.0.2 allows local users to gain privileges via a long -m command line argument.

View Code

CVE-2000-0027 EXPLOITDB c WORKING POC

IBM Network Station Manager NetStation - Privilege Escalation

IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack.

View Code

CVE-1999-0744 EXPLOITDB c WORKING POC

Netscape Enterprise Server - Buffer Overflow

Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request.

View Code

CVE-1999-0893 EXPLOITDB text WORKING POC

SCO OpenServer - Local Privilege Escalation

userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack.

View Code

CVE-1999-0888 EXPLOITDB bash WORKING POC

Oracle Intelligent Agent - Privilege Escalation

dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script.

View Code

CVE-1999-1008 EXPLOITDB c WORKING POC

xsoldier - Privilege Escalation via Long Argument

xsoldier program allows local users to gain root access via a long argument.

View Code

CVE-2000-0035 EXPLOITDB text WORKING POC

Majordomo - Privilege Escalation

resend command in Majordomo allows local users to gain privileges via shell metacharacters.

View Code

CVE-1999-1534 EXPLOITDB c WORKING POC

Knox Software Arkeia - Buffer Overflow

Buffer overflow in (1) nlservd and (2) rnavc in Knox Software Arkeia backup product allows local users to obtain root access via a long HOME environmental variable.

View Code

CVE-1999-1477 EXPLOITDB bash WORKING POC

Gnome Libs - Buffer Overflow

Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in programs such as nethack.

View Code

EIP-2026-102987 EXPLOITDB c WORKING POC

SCO Open Server 5.0.5 - X Library Buffer Overflow (1)

View Code

CVE-2000-0362 EXPLOITDB bash WORKING POC

Suse Linux - Buffer Overflow

Buffer overflows in Linux cdwtools 093 and earlier allows local users to gain root privileges.

View Code

CVE-1999-1008 EXPLOITDB c WORKING POC

xsoldier - Privilege Escalation via Long Argument

xsoldier program allows local users to gain root access via a long argument.

View Code