PT-2026-25349 · At&T Bell · Unix

Published 2026-03-13 · Updated 2026-03-13 · CVE-2025-71263

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions UNIX Fourth Research Edition version v4

Description The su command contains a buffer overflow issue because the password variable has a fixed size of 100 bytes. A local user can exploit this to gain root privileges. It is unlikely that UNIX v4 is running outside of a small number of lab environments. The vulnerable variable is password.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2025-71263

Affected Products

Unix

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-71263 · Security Note
• http://openwall.com/lists/oss-security/2026/03/20/6 · Note
• http://openwall.com/lists/oss-security/2026/03/21/4 · Note
• https://sigma-star.at/blog/2025/12/unix-v4-buffer-overflow · Note
• https://twitter.com/CVEnew/status/2032605903153701329 · Twitter Post
• https://spinellis.gr/blog/20251223 · Note
• https://tuhs.org/pipermail/tuhs/2026-January/032991.html · Note
• https://discuss.systems/@ricci/115747843169814700 · Note