STunnel 3.x - Client Negotiation Protocol Format String

// source: https://www.securityfocus.com/bid/3748/info Stunnel is a freely available, open source cryptography wrapper. It is designed to wrap arbitrary protocols that may or may not support cryptography. It is maintained by the Stunnel project. Stunnel does not properly handle unexpected input b...

CVE-1999-1221

The CVE-1999-1221 vulnerability affects Digital Unix (OSF/1) 3.x, where local users can modify arbitrary files via a symlink attack on the dxchpwd.log file. The provided documents describe the affected product and the underlying cause as a symlink attack, but do not include details on exploitatio...

FreeBSD-SA-01:58.lpd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:58 Security Advisory FreeBSD, Inc. Topic: lpd contains remote root vulnerability Category: core Module: lpd Announced: 2001-08-30 Credits: ISS X-Force Affects: All...

CVE-2001-0319

The CVE-2001-0319 entry concerns IBM Net.Commerce 3.x, where the macro orderdspc.d2w in the report capability is vulnerable to SQL injection via the order_rn option. The underlying issue is a SQL injection flaw in the remote interface that lets an attacker supply crafted input to alter or execute...

Security Advisory FreeBSD-SA-01:28.timed

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:28 Security Advisory FreeBSD, Inc. Topic: timed allows remote denial of service Category: core Module: timed Announced: 2001-03-12 Credits: Discovered during internal...

CVE-2001-0042

PHP 3.x PHP3 on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. dot dot attack containing "%5c" encoded backslash sequences...

FreeBSD-SA-00:77.procfs

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:77 Security Advisory FreeBSD, Inc. Topic: Several vulnerabilities in procfs REVISED Category: core Module: procfs Announced: 2000-12-18 Reissued: 2000-12-29 Affects:...

Security Advisory: FreeBSD-SA-00:61.tcpdump

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:61 Security Advisory FreeBSD, Inc. Topic: tcpdump contains remote vulnerabilities Category: core Module: tcpdump Announced: 2000-10-31 Credits: Discovered during internal...

Security Advisory: FreeBSD-SA-00:58.chpass

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:58 Security Advisory FreeBSD, Inc. Topic: chpass family contains local root vulnerability Category: core Module: chfn/chpass/chsh/ypchfn/ypchpass/ypchsh/passwd Announced:...

FreeBSD-SA-00:61.tcpdump

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:61 Security Advisory FreeBSD, Inc. Topic: tcpdump contains remote vulnerabilities REISSUED Category: core Module: tcpdump Announced: 2000-10-31 Reissued: 2000-11-06...

Security Advisory: FreeBSD-SA-00:17.libmytinfo

============================================================================= FreeBSD-SA-00:17 Security Advisory FreeBSD, Inc. Topic: Buffer overflow in libmytinfo may yield increased privileges with third-party software. Category: core Module: libmytinfo Announced: 2000-05-09 Affects: FreeBSD 3....

CVE-1999-0102

CVE-1999-0102 describes a buffer overflow in SLmail 3.x that lets attackers execute commands via a large FROM line. Affected component: SLmail 3.x. Root cause: improper handling of oversized From headers leading to memory corruption and command execution. Impact (as documented): partial confident...

CVE-1999-0102

Buffer overflow in SLmail 3.x allows attackers to execute commands using a large FROM line...

PT-1998-1026 · Slmail · Slmail

Name of the Vulnerable Software and Affected Versions: SLmail versions 3.x Description: A buffer overflow issue in SLmail allows attackers to execute commands by using a large FROM line. Recommendations: For SLmail versions 3.x, update to a version that fixes this issue to prevent command executi...

AIX 3.x - bugfiler Arbitrary File Creation

source: https://www.securityfocus.com/bid/1800/info A vulnerability exists in AIX 3. versions of bugfiler, a utility which automates the process of reporting an filing system bugs. Bugfiler, installed setuid root, creates files in a directory specified by the user invoking the program example:...

PT-1997-1015 · Microsoft +1 · Internet Explorer +1

Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 3.x through 4.x Netscape versions 2.x through 4.x Description: The issue allows remote attackers to monitor a user's web activities. This is related to JavaScript in the affected browsers. Recommendations: For...