CVE-1999-1419

CVE-1999-1419 describes a buffer overflow in the nss_nisplus.so.1 library used by NIS+ on Solaris 2.3 and 2.4, enabling local users to gain root privileges. The provided documents do not include patch versions or remediation steps. No exploitation details are provided.

psyBNC 2.3 Beta - encrypted text "spoofable" in others' irc terminal

BACKGROUND: psyBNC http://www.psychoid.lam3rz.de is an IRC bouncer with a variety of fantastic features. one of these features in encryption of irc text, with keys set on a per-channel basis. SUMMARY: someone call them person A in an irc channel where psyBNC users are chatting encrypted can...

squid DoS

Dear All, I'd like to inform about a DoS bug I recently found in SQUID regarding handling of mkdir-only PUT requests - please look at http://www.squid-cache.org/bugs/showbug.cgi?id=233 for more info. From my testing, it applies both to Squid 2.3 and 2.4 series. Tested on RedHat 6.2 and 7.1. This...

CVE-1999-1158

CVE-1999-1158 describes a buffer overflow in Solaris PAM (versions 2.5.1/2.5) and unix_scheme (Solaris 2.3/2.4) that lets local users gain root privileges through programs that use these modules (e.g., passwd, yppasswd, nispasswd). The root cause is a buffer overflow in the affected modules, enab...

CVE-1999-1521

Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM command that may allow a remote attacker to execute arbitrary code on the server...

CVE-2001-0142

CVE-2001-0142 affects squid 2.3 and earlier. The issue is a local symlink/race condition that can cause local users to overwrite arbitrary files via temporary file handling in certain configurations. Impact is described as local privilege/content modification without remote access; CVSS reflects ...

CVE-2001-0142

squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations...

CVE-2000-1095

CVE-2000-1095 affects modprobe in the modutils 2.3.x package. The vulnerability arises because modprobe uses popen() to invoke the echo program with user-supplied input, allowing unescaped shell metacharacters to be processed via /bin/sh when run through kmod-triggered paths. This can enable a lo...

CVE-2000-1052

The CVE-2000-1052 entry concerns Allaire JRun 2.3 server. Affected component: SSIFilter servlet. Root cause: remote attackers can directly invoke the SSIFilter servlet to obtain source code for executable content, leading to partial confidentiality impact. The public description states exposure o...

Allaire JRUN 2.3 Arbitrary File Retrieval

Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory Allaire JRUN 2.3 ---------------------------------------------------------------------- FS Advisory ID: FS-102300-13-JRUN Release Date: October 23, 2000 Product: Allaire JRUN 2.3 Vendor: Allaire Inc...

CVE-2000-0369

The CVE-2000-0369 entry describes a vulnerability in the IDENT server of Caldera Linux 2.3 where the server spawns multiple threads per IDENT request. This threading pattern can be exploited by remote attackers to trigger a denial-of-service condition against the impacted system. The reported imp...

CVE-2000-0192

The CVE-2000-0192 issue affects the default installation of Caldera OpenLinux 2.3 via the rpm_query CGI, which allows remote attackers to enumerate installed RPMs by accessing the CGI over the web server. This leads to information disclosure about installed services and versions (partial confiden...

Caldera OpenLinux 2.3 - rpm_query CGI

Caldera OpenLinux 2.3 - rpmquery CGI source: https://www.securityfocus.com/bid/1036/info A vulnerability exists in the default installation of Caldera OpenLinux 2.3. A CGI is installed in /home/httpd/cgi-bin/ names rpmquery. Any user can run this CGI and obtain a listing of the packages, and...

Computalynx CMail 2.3 SP22.4 - SMTP Buffer Overflow

Computalynx CMail 2.3 SP22.4 - SMTP Buffer Overflow // source: https://www.securityfocus.com/bid/633/info There is a buffer overflow in the CMail SMTP service long MAIL FROM: that may allow an attacker to execute arbitrary code on the target server. CMail Server...

CVE-1999-0334

In Solaris 2.2 and 2.3, when fsck fails on startup, it allows a local user with physical access to obtain root access...

CVE-2024-35350

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/?page=borrow/viewborrow. Manipulating the argument id can result in SQL injection...

CVE-2024-35349

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/category/viewcategory.php. Manipulating the argument id can result in SQL injection...