CVE-1999-1334

CVE-1999-1334 : Multiple buffer overflows in the filter command of Elm 2.4 allow an attacker to execute arbitrary commands via (1) long From: headers, (2) long Reply-To: headers, or (3) a long -f (filterfile) command line argument. The connected sources confirm Elm 2.4 as the affected component a...

CVE-1999-1413

Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users to overwrite or create files at higher privileges by causing a core dump, e.g. through dmesg...

CVE-1999-1184

CVE-1999-1184 describes a buffer overflow in Elm 2.4 and earlier, allowing local users to gain privileges via a long TERM environment variable. Affected: Elm 2.4 and earlier. Impact per CVSS: partial confidentiality, integrity and availability with local, low complexity, no authentication require...

CVE-1999-1158

CVE-1999-1158 describes a buffer overflow in Solaris PAM (versions 2.5.1/2.5) and unix_scheme (Solaris 2.3/2.4) that lets local users gain root privileges through programs that use these modules (e.g., passwd, yppasswd, nispasswd). The root cause is a buffer overflow in the affected modules, enab...

CVE-1999-1413

Solaris 2.4 before patching, prior to the kernel jumbo patch -35, is vulnerable. Set-gid programs can dump core even if the real user is not in the set-gid group, enabling local privilege escalation through a core dump (e.g., via dmesg). The connected documents confirm the vulnerability details; ...

CVE-2001-0624

QNX 2.4 allows a local user to read arbitrary files by directly accessing the mount point for the FAT disk partition, e.g. /fs-dos...

Tripwire temporary files

------------------------------------------------------------ Insecure temporary files in Tripwire [email protected] $Date: 2001/07/09 05:02:02 $ ------------------------------------------------------------ Author: Jarno Huuskonen [email protected] Discovered: Tue 16 Jan 2001 Vendor...

CVE-2000-0310

OpenBSD 2.4 is affected by CVE-2000-0310 through the IP fragment assembly mechanism. The vulnerability can allow a remote attacker to cause a denial of service by sending a large number of fragmented packets, affecting availability. The provided documents describe the issue but do not offer a rem...

CVE-2001-0316

CVE-2001-0316 affects Linux kernels 2.2 and 2.4 where sysctl can be invoked with a negative length, allowing unprivileged local users to read kernel memory and potentially obtain root privileges. Mitigation in the public records points to upgrading to kernel 2.2.19 or later (and vendor advisories...

CVE-2000-0309

Public technical details about CVE-2000-0309 are not provided in the connected documents. The initial entry notes a local DoS in OpenBSD 2.4 with DDB, but no further technical specifics or fixes are included here. Monitor for updates.

CVE-2000-0310

IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets...

CVE-2000-0309

The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service...

CVE-2000-1056

CiscoSecure ACS Server 2.4(2) and earlier versions are affected by an LDAP authentication bypass when the LDAP server allows null passwords. The vulnerability allows remote attackers to bypass authentication and access the server, with partial impact to confidentiality, integrity, and availabilit...

Solaris /usr/bin/cu Vulnerability

Description The /usr/bin/cu command contains a buffer overflow, the problem occurs when it copy his own name argv0 to an internal variable without checking out its lenght and this causes the overflow. Vulnerable Versions Sun Solaris 2.4 Sun Solaris 2.5 Sun Solaris 2.5.1 Sun Solaris 2.6 Sun Solari...

[SECURITY] [DSA-005-1] slocate local exploit

Package : slocate Problem type : local exploit Debian-specific: no Michel Kaempf reported a security problem in slocate a secure version of locate, a tool to quickly locate files on a filesystem on bugtraq which was originally discovered by zorgon. He discovered there was a bug in the database...

Linux news 13.11.00

Linux Kernel pre-patch 2.4.0 test11-pre3 Вышел третий пререлиз одинадцатого тестового ядра Linux - Linux Kernel 2.4.0. Подробее: ftp://ftp.funet.fi/pub/linux/kernel/testing 2.4 будет в декабре Линус обмолвился в интервью немецкому журналу, что ядро 2.4 точно будет в декабре. Что в принципе...

Linux news 4.11.00

Linux 2.4 Todo Вышла новая редакция текста Linux 2.4 Todo - списка того, чего должно быть сделано до выхода новой серии стабильных ядер - Linux 2.4. Эта редакция соответствует ядру Linux 2.4.0test10. Подробнее: http://linuxtoday.com/newsstory.php3?ltsn=2000-11-03-011-04-NW-KN NetCraft расширяет...

Linux news 6.10.00

Ваш билет до Windows 2000 Примечательное начало: как бы вы ни относились к Microsoft, трудно отрицать, что Windows 2000 Professional - это на сегодня самая стабильная и мощная версия Windows. Если вы были бы рады избавиться от изъянов и ограничений Windows 95 или 98, но не собираетесь в ближайшее...

Omnis Studio 2.4 - Weak Database Field Encryption

source: https://www.securityfocus.com/bid/1255/info Omnis Studio 2.4 is a development tool for creating database applications. The tool gives developers the option to encrypt database entries. However, the encryption scheme used is weak and easily broken with any scientific calculator or even pen...

CVE-1999-0114

CVE-1999-0114 (Elm 2.4 mail package) : The Elm mail package (elm-2.4) is affected via the filter command, where a symlink attack lets local users execute commands as other users and read other users’ files. Root cause is a directory/file permission/symlink handling flaw in the filter command. Imp...