Privelege escalation via cron in OpenBSD
Published:		12.04.2002
Source:		BUGTRAQ
SecurityVulns ID:		1926
Type:		local
Level:		6/10
Description:		During mail'ing of job results shell characters are not properly escaped for mail command.

Affected:

OPENBSD : OpenBSD 3.0

Original document

Milos Urbanek, OpenBSD Local Root Compromise (12.04.2002)

Discuss:

Read or add your comments to this news (0 comments)

Buffer overflow in libX11 for OpenUnix
Published:		12.04.2002
Source:		BUGTRAQ
SecurityVulns ID:		1928
Type:		library
Level:		6/10
Description:		Buffer overflow during -xrm command string argument parsing.

Affected:		SCO : UnixWare 7.1
		SCO : Open UNIX 8.0

Original document

CALDERA, Security Update: [CSSA-2002-SCO.15] Open UNIX 8.0.0 UnixWare 7.1.1 : Buffer overflow in libX11 with -xrm (12.04.2002)

Discuss:

Read or add your comments to this news (0 comments)

SQL, PERL, HTML injection in IBM Informix Web DataBlade updated since 12.04.2002
Published:		18.04.2002
Source:		BUGTRAQ
SecurityVulns ID:		1927
Type:		remote
Level:		7/10
Description:		There are multiple ways for SQL query modification and to execute user-supplied perl file.

Affected:

IBM : Web DataBlade 4.12

Original document		Simon Lodal, IBM Informix Web DataBlade: Local root by design (18.04.2002)
		Simon Lodal, IBM Informix Web DataBlade: Auto-decoding HTML entities (12.04.2002)
		Simon Lodal, IBM Informix Web DataBlade: SQL injection (12.04.2002)

Discuss:

Read or add your comments to this news (0 comments)