Linux

Buffer overflow in ncurses 5.0, and the ncurses4 compatibility package as used in Red Hat Linux, allows local users to gain privileges, related to "routines for moving the physical cursor and scrolling."

Published: 2003-04-02T05:00:00.000Z
Updated: 2024-08-08T02:35:17.349Z

When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib.

Published: 2001-05-07T04:00:00.000Z
Updated: 2024-08-08T04:06:55.519Z

The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by modifying the DNS for the attacking IP.

Published: 2005-04-21T04:00:00.000Z
Updated: 2024-08-08T05:45:37.469Z

The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file.

Published: 2005-04-21T04:00:00.000Z
Updated: 2024-08-08T05:45:37.471Z

Buffer overflow in pam_localuser PAM module in Red Hat Linux 7.x and 6.x allows attackers to gain privileges.

Published: 2001-01-22T05:00:00.000Z
Updated: 2024-08-08T05:45:37.338Z