3 ms·

CVE-2025-71263: Unix fourth edition buffer overflow vulnerability

• pseudohadamard 8mo ago
  In UNIX Fourth Research Edition (v4), the su command is vulnerable to a buffer overflow due to the 'password' variable having a fixed size of 100 bytes. A local user can exploit this to gain root privileges. It is unlikely that UNIX v4 is running anywhere outside of a very small number of lab environments. Related: https://www.tomshardware.com/software/linux/unix-v4-recovered-from-randomly-found-tape-at-university-of-utah-only-known-copy-of-first-os-version-with-kernel-and-core-utilities-written-in-c https://www.tomshardware.com/software/linux/unix-v4-recovere...
• tetradium_95 8mo ago
  [dead]
  • pseudohadamard 8mo ago
    11:25am: Fifty-year-old copy of Unix recovered from old tape backup. 11:27am: First vulnerability found.