| OSVDB ID | Disclosure Date | Title |
|
44958
Description:
Unknown / Incomplete
|
1994-10-30
|
Intel Pentium Processors Floating Point Unit Calculation Weakness
|
|
18727
Description:
Older AIX releases, and potentially other Unix flavors may contain a flaw related to user ID (UID) processing that allows for privilege escalation. In some cases, various daemons or services fail to properly check the bounds of UIDs resulting in an overflow. With a specially crafted UID, an attacker can assume root privileges regardless of the root UID mapping. For NFS servers, this may be abused to 'wrap' your UID around past 65535, so that the effective UID processed becomes '0' or 'root', resulting in full access to the exported file system.
|
1994-10-22
|
IBM AIX Negative UID Privilege Escalation
|
|
17201
Description:
FreeBSD contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when a malicious user executes a setuid program that utilizes the standard C library access() function. As access() will only verify that a user can access a given pathname, its use creates a race condition. This flaw may lead to a loss of integrity.
|
1994-10-20
|
FreeBSD access() Function Race Condition
|
|
3103
Description:
Retrospect Remote Control Panel has a flaw that potentially allows a remote attacker to initialize a system, download every file and de-initialize the system. The flaw is due to the installation of the software not fully configuring the server. Once installed, Remote will wait for the server to download a security code and serial number. If this is not done, it leaves the server open to any remote user who has a copy of the software to perform the same actions not taken by the administrator.
|
1994-10-18
|
Retrospect Remote Control Panel Un-initilization
|
|
11725
Description:
Unknown / Incomplete
|
1994-10-15
|
Elvis elvprsv IFS Variable Local Privilege Escalation
|
|
17059
Description:
Unknown / Incomplete
|
1994-10-14
|
Solaris crash kmem Local Privilege Escalation
|
|
17098
Description:
Unknown / Incomplete
|
1994-10-14
|
Eric Raymond pcspkr Kernel Panic Local DoS
|
|
53015
Description:
At least one version of ircII (2.2.9) located on the cs-pub.bu.edu FTP site were found to contain a backdoor. It is believed the code in ctcp.c allowed a CTCP JUPE or CTCP GROK command to execute arbitrary commands on the client host. This could allow an attacker to gain remote access to the host.
|
1994-10-11
|
ircII on cs-pub.bu.edu Trojaned Distribution
|
|
17057
Description:
Unknown / Incomplete
|
1994-10-09
|
smail .forward Arbitrary Local File Creation
|
|
17056
Description:
Unknown / Incomplete
|
1994-10-06
|
smail -D Parameter Arbitrary Privileged File Creation
|
|
17189
Description:
Unknown / Incomplete
|
1994-10-02
|
SunOS / Solaris /dev/mouse ucred Local Privilege Escalation
|