IBM : Security Vulnerabilities, CVEs, (Overflow)

Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).

Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.

Buffer overflow in statd allows root privileges.

Local user gains root privileges via buffer overflow in rdist, via expstr() function.

Local user gains root privileges via buffer overflow in rdist, via lookup() function.

Command execution in Sun systems via buffer overflow in the at program.

Buffer overflow in xlock program allows local users to execute commands as root.

Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.

Buffer overflow in NLS (Natural Language Service).

Buffer overflow in University of Washington's implementation of IMAP and POP servers.

Buffer overflow of rlogin program using TERM environmental variable.

Buffer overflow in AIX lquerylv program gives root access to local users.

Buffer overflow in AIX xdat gives root access to local users.

Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname.

Buffer overflow in AIX libDtSvc library can allow local users to gain root access.

Buffer overflow in AIX rcp command allows local users to obtain root access.

Buffer overflow in AIX writesrv command allows local users to obtain root access.

Buffer overflow in syslog utility allows local or remote attackers to gain root privileges.

Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.

Buffer overflow in AIX dtterm program for the CDE.

Buffer overflow in AIX lchangelv gives root access.

Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.

Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command.

Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable.

Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.