Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.

BID:121 | URL:http://www.securityfocus.com/bid/121 | CERT:CA-98.12.mountd | CIAC:J-006 | URL:http://www.ciac.org/ciac/bulletins/j-006.shtml | SGI:19981006-01-I | URL:ftp://patches.sgi.com/support/free/security/advisories/19981006-01-I | XF:linux-mountd-bo

Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).

BID:122 | URL:http://www.securityfocus.com/bid/122 | CERT:CA-98.11.tooltalk | NAI:NAI-29 | SGI:19981101-01-A | URL:ftp://patches.sgi.com/support/free/security/advisories/19981101-01-A | SGI:19981101-01-PX | URL:ftp://patches.sgi.com/support/free/security/advisories/19981101-01-PX | XF:aix-ttdbserver | XF:tooltalk

MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook.

CERT:CA-98.10.mime_buffer_overflows | MS:MS98-008 | URL:https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-008 | SUN:00175 | XF:outlook-long-name

Arbitrary command execution via IMAP buffer overflow in authenticate command.

BID:130 | URL:http://www.securityfocus.com/bid/130 | CERT:CA-98.09.imapd | SUN:00177 | URL:http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/177 | XF:imap-authenticate-bo

Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command.

AUSCERT:AA-98.01 | BID:133 | URL:http://www.securityfocus.com/bid/133 | CERT:CA-98.08.qpopper_vul | SGI:19980801-01-I | URL:ftp://patches.sgi.com/support/free/security/advisories/19980801-01-I | XF:qpopper-pass-overflow

Buffer overflow in NIS+, in Sun's rpc.nisd program.

CERT:CA-98.06.nisd | ISS:June10,1998 | SUN:00170 | URL:http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/170 | XF:nisd-bo-check

Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.

BID:134 | URL:http://www.securityfocus.com/bid/134 | CERT:CA-98.05.bind_problems | HP:HPSBUX9808-083 | URL:http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9808-083 | SGI:19980603-01-PX | URL:ftp://patches.sgi.com/support/free/security/advisories/19980603-01-PX | SUN:00180 | URL:http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/180 | XF:bind-bo

Buffer overflow in statd allows root privileges.

AUSCERT:AA-97.29 | BID:127 | URL:http://www.securityfocus.com/bid/127 | CERT:CA-97.26.statd | XF:statd

Arbitrary command execution via buffer overflow in Count.cgi (wwwcount) cgi-bin program.

BID:128 | URL:http://www.securityfocus.com/bid/128 | BUGTRAQ:19971010 Security flaw in Count.cgi (wwwcount) | CERT:CA-97.24.Count_cgi | XF:http-cgi-count

Local user gains root privileges via buffer overflow in rdist, via expstr() function.

CERT:CA-97.23.rdist | SUN:00179 | URL:http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/179 | XF:rdist-bo3 | XF:rdist-sept97

Local user gains root privileges via buffer overflow in rdist, via lookup() function.

CERT:CA-96.14.rdist_vul | MISC:https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0023 | XF:rdist-bo | XF:rdist-bo2

root privileges via buffer overflow in df command on SGI IRIX systems.

AUSCERT:AA-97.19.IRIX.df.buffer.overflow.vul | BID:346 | URL:http://www.securityfocus.com/bid/346 | CERT:CA-1997-21 | URL:http://www.cert.org/advisories/CA-1997-21.html | CERT-VN:VU#20851 | URL:http://www.kb.cert.org/vuls/id/20851 | SGI:SGI:19970505-01-A | SGI:SGI:19970505-02-PX | XF:df-bo(440) | URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/440

root privileges via buffer overflow in pset command on SGI IRIX systems.

AUSCERT:AA-97.20.IRIX.pset.buffer.overflow.vul | CERT:CA-97.21.sgi_buffer_overflow | MISC:https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0026 | XF:pset-bo

root privileges via buffer overflow in eject command on SGI IRIX systems.

AUSCERT:AA-97.21.IRIX.eject.buffer.overflow.vul | CERT:CA-97.21.sgi_buffer_overflow | MISC:https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0027 | XF:eject-bo

root privileges via buffer overflow in login/scheme command on SGI IRIX systems.

AUSCERT:AA-97.22.IRIX.login.scheme.buffer.overflow.vul | CERT:CA-97.21.sgi_buffer_overflow | MISC:https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0028 | XF:sgi-schemebo

root privileges via buffer overflow in ordist command on SGI IRIX systems.

AUSCERT:AA-97.23-IRIX.ordist.buffer.overflow.vul | CERT:CA-97.21.sgi_buffer_overflow | MISC:https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0029 | XF:ordist-bo

root privileges via buffer overflow in xlock command on SGI IRIX systems.

AUSCERT:AA-97.24.IRIX.xlock.buffer.overflow.vul | CERT:CA-97.21.sgi_buffer_overflow | MISC:https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0030 | SGI:19970508-02-PX | XF:sgi-xlockbo

Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.

AUSCERT:AA-96.12 | BID:707 | URL:http://www.securityfocus.com/bid/707 | BUGTRAQ:19960813 Possible bufferoverflow condition in lpr, xterm and xload | BUGTRAQ:19961025 Linux & BSD's lpr exploit | CERT:CA-97.19.bsdlp | CIAC:H-08 | CIAC:I-042 | URL:http://www.ciac.org/ciac/bulletins/i-042.shtml | MLIST:[freebsd-security] 19961025 Vadim Kolontsov: BoS: Linux & BSD's lpr exploit | MLIST:[linux-security] 19961122 LSF Update#14: Vulnerability of the lpr program. | SGI:19980402-01-PX | URL:ftp://patches.sgi.com/support/free/security/advisories/19980402-01-PX | XF:bsd-lprbo | XF:bsd-lprbo2 | XF:lpr-bo

Command execution in Sun systems via buffer overflow in the at program.

CERT:CA-97.18.at | MISC:https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0033 | SUN:00160 | XF:sun-atbo

Buffer overflow in suidperl (sperl), Perl 4.x and 5.x.

CERT:CA-97.17.sperl | MISC:https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0034 | XF:perl-suid

Buffer overflow in xlock program allows local users to execute commands as root.

CERT:CA-97.13.xlock | MISC:https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0038 | XF:xlock-bo

Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.

CERT:CA-97.11.libXt | MISC:https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0040 | XF:libXt-bo

Buffer overflow in NLS (Natural Language Service).

CERT:CA-97.10.nls | MISC:https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0041 | XF:nls-bo

Buffer overflow in University of Washington's implementation of IMAP and POP servers.

CERT:CA-97.09.imap_pop | MISC:https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0042 | NAI:NAI-21 | XF:popimap-bo

Buffer overflow of rlogin program using TERM environmental variable.

CERT:CA-97.06.rlogin-term | MISC:https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0046 | XF:rlogin-termbo

MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.

BID:685 | URL:http://www.securityfocus.com/bid/685 | CERT:CA-97.05.sendmail | XF:sendmail-mime-bo2

Buffer overflow in HP-UX newgrp program.

AUSCERT:AA-96.16.HP-UX.newgrp.Buffer.Overrun.Vulnerability | CERT:CA-97.02.hp_newgrp | MISC:https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0050 | XF:hp-newgrpbo

Buffer overflows in Sun libnsl allow root access.

AIXAPAR:IX80543 | URL:http://www-1.ibm.com/support/search.wss?rs=0&q=IX80543&apar=only | RSI:RSI.0005.05-14-98.SUN.LIBNSL | SUN:00172 | URL:http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/172 | XF:sun-libnsl

Buffer overflow in Sun's ping program can give root access to local users.

SUN:00174 | URL:http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/174 | XF:sun-ping

Buffer overflow in PHP cgi program, php.cgi allows shell access.

BID:712 | URL:http://www.securityfocus.com/bid/712 | NAI:NAI-12 | XF:http-cgi-phpbo

Buffer overflow in AIX lquerylv program gives root access to local users.

BUGTRAQ:May28,1997 | MISC:https://marc.info/?l=bugtraq&m=87602167418428&w=2 | XF:lquerylv-bo

Multiple buffer overflows in how dtmail handles attachments allows a remote attacker to execute commands.

SUN:00181 | URL:http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/181 | XF:hp-dtmail

Solaris ufsrestore buffer overflow.

OSVDB:8158 | URL:http://www.osvdb.org/8158 | SUN:00169 | URL:http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/169 | XF:sun-ufsrestore

Apache httpd cookie buffer overflow for versions 1.1.1 and earlier.

MISC:https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0071 | NAI:NAI-2 | XF:http-apache-cookie

Buffer overflow in AIX xdat gives root access to local users.

ERS:ERS-SVA-E01-1997:004.1 | MISC:https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0072 | XF:ibm-xdat

Buffer overflow in wu-ftp from PASV command causes a core dump.

MISC:https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0076 | XF:ftp-args

Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname.

BUGTRAQ:19960821 rwhod buffer overflow | XF:rwhod(119) | URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/119 | XF:rwhod-vuln(118) | URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/118

Buffer overflow in AIX libDtSvc library can allow local users to gain root access.

ERS:ERS-SVA-E01-1997:005.1 | MISC:https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0089 | XF:ibm-libDtSvc

Buffer overflow in AIX rcp command allows local users to obtain root access.

ERS:ERS-SVA-E01-1997:005.1 | MISC:https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0090 | XF:ibm-rcp

Buffer overflow in AIX writesrv command allows local users to obtain root access.

ERS:ERS-SVA-E01-1997:005.1 | MISC:https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0091 | XF:ibm-writesrv

Buffer overflow in SMTP HELO command in Sendmail allows a remote attacker to hide activities.

MISC:https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0098 | XF:smtp-helo-bo

Buffer overflow in syslog utility allows local or remote attackers to gain root privileges.

CERT:CA-95.13.syslog.vul | MISC:https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0099 | XF:smtp-syslog

Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.

CIAC:H-13 | URL:http://ciac.llnl.gov/ciac/bulletins/h-13.shtml | ERS:ERS-SVA-E01-1996:007.1 | ERS:ERS-SVA-E01-1997:001.1 | NAI:NAI-1 | SUN:00137a | XF:ghbn-bo

Buffer overflow in SLmail 3.x allows attackers to execute commands using a large FROM line.

MISC:https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0102 | XF:slmail-fromheader-overflow

Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests containing a large number of / characters.

BUGTRAQ:19971230 Apache DoS attack? | MISC:https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0107 | XF:apache-dos

The printers program in IRIX has a buffer overflow that gives root access to local users.

BUGTRAQ:19970527 another day, another buffer overflow.... | URL:http://seclists.org/bugtraq/1997/May/191 | XF:printers-bo

Buffer overflow in ffbconfig in Solaris 2.5.1.

AUSCERT:AA-97.06 | SUN:00140 | URL:http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/140 | XF:ffbconfig-bo

Buffer overflow in AIX dtterm program for the CDE.

BUGTRAQ:19970520 AIX 4.2 dtterm exploit | XF:dtterm-bo(878) | URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/878

Buffer overflow in dtaction command gives root access.

ERS:ERS-SVA-E01-1997:005.1 | MISC:https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0121 | SUN:00164

Buffer overflow in AIX lchangelv gives root access.

BUGTRAQ:Jul21,1999 | MISC:https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0122 | XF:lchangelv-bo