{"dataType": "CVE_RECORD", "cveMetadata": {"cveId": "CVE-2025-71263", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "state": "PUBLISHED", "assignerShortName": "mitre", "dateReserved": "2026-03-13T18:38:07.187Z", "datePublished": "2026-03-13T18:38:07.721Z", "dateUpdated": "2026-03-21T01:33:36.533Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unknown", "product": "UNIX", "vendor": "AT&T Bell Labs", "versions": [{"status": "affected", "version": "4", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "In UNIX Fourth Research Edition (v4), the su command is vulnerable to a buffer overflow due to the 'password' variable having a fixed size of 100 bytes. A local user can exploit this to gain root privileges. It is unlikely that UNIX v4 is running anywhere outside of a very small number of lab environments."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-120", "description": "CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-03-13T18:43:52.976Z"}, "references": [{"url": "https://sigma-star.at/blog/2025/12/unix-v4-buffer-overflow/"}, {"url": "https://www.tuhs.org/pipermail/tuhs/2026-January/032991.html"}, {"url": "https://discuss.systems/@ricci/115747843169814700"}, {"url": "https://www.spinellis.gr/blog/20251223/"}], "x_generator": {"engine": "CVE-Request-form 0.0.1"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-13T19:36:07.731823Z", "id": "CVE-2025-71263", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-13T19:36:17.585Z"}}, {"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/03/20/6"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-03-21T01:33:36.533Z"}}]}, "dataVersion": "5.2"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/03/20/6"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-03-21T01:33:36.533Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-71263", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-03-13T19:36:07.731823Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-13T19:36:14.094Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "AT&T Bell Labs", "product": "UNIX", "versions": [{"status": "affected", "version": "4", "versionType": "custom"}], "defaultStatus": "unknown"}], "references": [{"url": "https://sigma-star.at/blog/2025/12/unix-v4-buffer-overflow/"}, {"url": "https://www.tuhs.org/pipermail/tuhs/2026-January/032991.html"}, {"url": "https://discuss.systems/@ricci/115747843169814700"}, {"url": "https://www.spinellis.gr/blog/20251223/"}], "x_generator": {"engine": "CVE-Request-form 0.0.1"}, "descriptions": [{"lang": "en", "value": "In UNIX Fourth Research Edition (v4), the su command is vulnerable to a buffer overflow due to the 'password' variable having a fixed size of 100 bytes. A local user can exploit this to gain root privileges. It is unlikely that UNIX v4 is running anywhere outside of a very small number of lab environments."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-120", "description": "CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-03-13T18:43:52.976Z"}}}, "cveMetadata": {"cveId": "CVE-2025-71263", "state": "PUBLISHED", "dateUpdated": "2026-03-21T01:33:36.533Z", "dateReserved": "2026-03-13T18:38:07.187Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2026-03-13T18:38:07.721Z", "assignerShortName": "mitre"}, "dataVersion": "5.2"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "In UNIX Fourth Research Edition (v4), the su command is vulnerable to a buffer overflow due to the 'password' variable having a fixed size of 100 bytes. A local user can exploit this to gain root privileges. It is unlikely that UNIX v4 is running anywhere outside of a very small number of lab environments."}, {"lang": "es", "value": "En UNIX Cuarta Edici\u00f3n de Investigaci\u00f3n (v4), el comando su es vulnerable a un desbordamiento de b\u00fafer debido a que la variable 'password' tiene un tama\u00f1o fijo de 100 bytes. Un usuario local puede explotar esto para obtener privilegios de root. Es poco probable que UNIX v4 se est\u00e9 ejecutando en alg\u00fan lugar fuera de un n\u00famero muy reducido de entornos de laboratorio."}], "id": "CVE-2025-71263", "lastModified": "2026-03-21T02:16:18.103", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.4, "impactScore": 5.9, "source": "[email protected]", "type": "Secondary"}]}, "published": "2026-03-13T19:53:53.983", "references": [{"source": "[email protected]", "url": "https://discuss.systems/@ricci/115747843169814700"}, {"source": "[email protected]", "url": "https://sigma-star.at/blog/2025/12/unix-v4-buffer-overflow/"}, {"source": "[email protected]", "url": "https://www.spinellis.gr/blog/20251223/"}, {"source": "[email protected]", "url": "https://www.tuhs.org/pipermail/tuhs/2026-January/032991.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2026/03/20/6"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-120"}], "source": "[email protected]", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "UNIX", "source": "cna", "vendor": "AT&T Bell Labs"}, "product": "unix", "vendor": "at&t_bell_labs"}], "created": "2026-03-16T09:24:34.746028+00:00", "updated": "2026-03-16T09:24:34.746107+00:00", "vendors": ["at&t_bell_labs", "at&t_bell_labs$PRODUCT$unix"]}