CVE-1999-1468

rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modifying the IFS Internal Field Separator variable...

Buffer Overflow in SGI IRIX syslogd

Overview A remotely exploitable buffer overflow in SGI IRIX syslogd may allow an attacker to crash syslogd or execute arbitrary code. Description There is a remotely exploitable buffer overflow in SGI IRIX syslogd. For more detailed information please see SGI Security Advisory 20020405-01-I. ---...

Sendmail < 8.8.3 Daemon Mode Local Privilege Escalation

The remote Sendmail server, according to its version number, allows local user to start it in daemon mode and gain root privileges. C Tenable Network Security, Inc. Original script by Xue Yong Zhi Changes by Tenable: - Revised plugin title, output formatting 9/14/09 - Updated to use compat.inc,...

Sendmail < 8.6.8 -debug Local Privilege Escalation

The remote Sendmail server, according to its version number, allows local users to gain root access via a large value in the debug -d command line option. C Tenable Network Security, Inc. Original script by Xue Yong Zhi Changes by Tenable: - Revised plugin title, output formatting 9/16/09 - Updat...

Unpassworded 'EZsetup' Account

The account 'EZsetup' has no password set. An attacker may use it to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "EZsetup"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11241; scriptversion"1.36";...

Enhydra Multiserver Default Password

This system appears to be running the Enhydra application server configured with the default administrator password of 'enhydra'. A potential intruder could reconfigure this service and use it to obtain full access to the system. This script was written by H D Moore See the Nessus Scripts License...

CVE-2002-1999

HP Praesidium Webproxy 1.0 running on HP-UX 11.04 VVOS could allow remote attackers to cause Webproxy to forward requests to the internal network via crafted HTTP requests...

CVE-1999-1571

CVE-1999-1571 describes a buffer overflow in the sar utility on SCO OpenServer 5.0.0–5.0.5 that may allow a local user to gain root privileges via a long -f parameter. The form of impact is local privilege escalation with complete confidentiality/integrity/availability impacts per the entry. The ...

CVE-1999-1570

CVE-1999-1570 describes a buffer overflow in the OpenServer 5.0.5 implementation of the choose-file utility sar, exploitable by a local user through a long -o parameter to gain root privileges. The description specifies a local-privilege escalation impact (root) but does not provide exploitation ...

CVE-1999-1569

Quake 1 and NetQuake servers allow remote attackers to cause a denial of service resource exhaustion or forced disconnection via a flood of spoofed UDP connection packets, which exceeds the server's player limit...

CVE-1999-1569

CVE-1999-1569 affects Quake 1 and NetQuake servers. The vulnerability stems from handling a flood of spoofed UDP connection packets that surpass the server’s player limit, enabling remote attackers to cause a denial of service through resource exhaustion or forced disconnection. The provided docu...

Sendmail 8.6.9 IDENT Remote Overflow

The remote Sendmail server, according to its version number, may be vulnerable to the ident overflow which allows any remote attacker to execute arbitrary commands as root. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10278; scriptversion"1.19";...

Multiple Vendor rpc.nisd Long NIS+ Argument Remote Overflow

The remote RPC service 100300 nisd is vulnerable to a buffer overflow attack that allows any user to obtain a root shell on this host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10251; scriptversion"1.28"; scriptcvsdate"Date: 2018/11/15 20:50:24";...

CVE-1999-1362

Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service crash by calling certain WIN32K functions with incorrect parameters...

CVE-1999-1080

In SunOS 5.7, rmmount may mount file systems without the nosuid flag, allowing local users with physical access to gain root privileges by mounting media containing a setuid program and running volcheck when nosuid is not specified in rmmount.conf. This vulnerability stems from mounting behavior ...

CVE-1999-1080

rmmount in SunOS 5.7 may mount file systems without the nosuid flag set, contrary to the documentation and its use in previous versions of SunOS, which could allow local users with physical access to gain root privileges by mounting a floppy or CD-ROM that contains a setuid program and running...

CVE-1999-1362

CVE-1999-1362 : Affected component is Win32k.sys on Windows NT 4.0 (pre-SP2). Local users can trigger a denial-of-service (crash) by calling certain WIN32K functions with incorrect parameters. The available documents do not provide a root-cause analysis beyond this description, nor any explicit r...

Microsoft IIS / Site Server codebrws.asp Arbitrary Source Disclosure

Microsoft's IIS 5.0 web server is shipped with a set of sample files to demonstrate different features of the ASP language. One of these sample files allows a remote user to view the source of any file in the web root with the extension .asp, .inc, .htm, or .html. %NASLMINLEVEL 70300 This script...

CVE-1999-1473

CVE-1999-1473 affects Internet Explorer 3.02 and 4.0, where during a page redirect the browser automatically resends authentication information to the redirected site. This issue can expose credentials to the second site, aligning with the description that it resends authentication data and the C...

CVE-1999-1382

CVE-1999-1382 describes a local privilege escalation in NetWare NFS mode 1 and 2. The issue arises when NetWare-NFS implements the Unix Read Only flag by changing a file’s ownership to root, which can be exploited by a local user who creates a setuid program and marks it as Read Only; NetWare-NFS...