Nec: Security Vulnerabilities
Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.
CVSS Score
10.0
EPSS Score
0.013
Published
1997-01-27
Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.
CVSS Score
9.8
EPSS Score
0.016
Published
1996-12-04
The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access.
CVSS Score
7.2
EPSS Score
0.001
Published
1996-06-26
pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call.
CVSS Score
1.9
EPSS Score
0.001
Published
1996-04-18
rpc.ypupdated (NIS) allows remote users to execute arbitrary commands.
CVSS Score
10.0
EPSS Score
0.602
Published
1995-12-12
Page 11