Vulnerabilidades

Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through multiple connections to network services.

Digital Unix Networker program nsralist has a buffer overflow which allows local users to obtain root privilege.

Vulnerability in Compaq Tru64 UNIX edauth command.

Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.

Digital Unix 4.0 has a buffer overflow in the inc program of the mh package.

Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows remote attackers to gain privileges.

Buffer overflow in at program in Digital UNIX 4.0 allows local users to gain root privileges via a long command line argument.

Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type.

UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.

Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a long TERM environmental variable and (2) a long entry in the .mscreenrc file.

Vulnerability in Advanced File System Utility (advfs) in Digital UNIX 4.0 through 4.0d allows local users to gain privileges.

Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.

Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.

Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.

ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.

MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook.

FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.

xterm in Digital UNIX 4.0B *with* patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a core dump file, which is created when xterm is called with a DISPLAY environmental variable set to a display that xterm cannot access.

DNS cache poisoning via BIND, by predictable query IDs.

ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.

Command execution in Sun systems via buffer overflow in the at program.

dxchpwd in Digital Unix (OSF/1) 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.log file.

Vulnerability in a certain system call in SCO UnixWare 2.0.x and 2.1.0 allows local users to access arbitrary files and gain root privileges.

Local user gains root privileges via buffer overflow in rdist, via lookup() function.

Delete or create a file via rpc.statd, due to invalid information.