1093 matches found
CVE-1999-1219
The CVE-1999-1219 entry concerns SGI’s sgihelp in the SGI help system and print manager on IRIX 5.2 and earlier. It states that local users can gain root privileges, possibly through the clogin command. The available sources reiterate this high-level vulnerability without providing concrete explo...
Cisco Catalyst 2900XL crashes with empty UDP packet when SNMP is disabled.
Hi It's possible to crash Cisco Catalyst 2900XL with a empty UDP packet to port 161 when SNMP is disabled. Other switches also? The crash only occurs when the switch is booted with SNMP disabled. Seems that SNMP is listening, even if SNMP is disabled.. ? I have only tested this with Software...
CVE-2000-1156
StarOffice 5.2 follows symlinks and sets world-readable permissions for the /tmp/soffice.tmp directory, which allows a local user to read files of the user who is using StarOffice...
PT-2000-1003 · Ncurses · Ncurses +1
Name of the Vulnerable Software and Affected Versions: ncurses versions 5.0 through 5.2 ncurses-devel versions 5.0 through 5.2 Description: The issue is related to a buffer overflow in the ncurses library, which can be exploited locally. This can lead to the execution of arbitrary commands via lo...
CVE-2000-0733
CVE-2000-0733 affects the Telnetd server on IRIX 5.2–6.1, where the service fails to properly sanitize user-supplied format strings in the IAC-SB-TELOPT_ENVIRON request. This leads to a remote code execution condition via a crafted long RLD variable, enabling arbitrary commands on vulnerable syst...
Cisco PIX Firewall 5.2 - PASV Mode FTP Internal Address Disclosure
source: https://www.securityfocus.com/bid/1877/info The Cisco PIX is a popular firewall network device. It is possible to configure the PIX so that it hides the IP address of internal ftp servers from clients connecting to it. By sending a number of requests to enter passive ftp mode PASV during ...
Cisco PIX Firewall (smtp content filtering hack)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 How to escape "fixup smtp" of Cisco Pix Firewall: The Cisco Pix Firewall normally restrict some protocol commandhttp,ftp,smtp and manage multisession protocolh323, ftp,sqlnet . I made some test on a BSDI3.0 running sendmail9 placed in the dmz . The Pi...
Linux Kernel 2.0.x (Debian 2.1 / RedHat 5.2) - Packet Length with Options
/ source: https://www.securityfocus.com/bid/870/info Debian 2.1,Linux kernel 2.0.34/2.0.35/2.0.36/2.0.37/2.0.38,RedHat 5.2 i386 Packet Length with Options Vulnerability A vulnerability in the Linux kernel's TCP/IP allows local users to crash, hang or corrupt the system. A local user can crash, ha...
CVE-1999-0363
The CVE entry refers to a buffer overflow in the SuSE 5.2 PLP lpc program that can lead to root compromise. The connected documents corroborate the general impact but do not provide technical specifics such as the exact vulnerable function, version scope beyond the SuSE 5.2 PLP lpc component, or ...
libtermcap_exploit.txt
Subject: local libtermcap exploit To: [email protected] Well, I wrote this a little while back. This is a serious bug, so people should be able to test their systems properly. All admins should definitely upgrade to the newest libtermcap. - sk8 of LS / Local exploit for suid root programs...
pine-bof-10000.txt
Date: Mon, 8 Feb 1999 21:19:29 +0000 From: Chris Evans To: [email protected] Subject: Pine again : Hi, PINE seems to be flavour of the month so I'll add to Michal's post. This is much less serious than Michal's problem but probably noteworthy anyway. PINE can be made to crash if /var/spool/mai...
RedHat Linux 5.2 i386/6.0 - No Logging
source: https://www.securityfocus.com/bid/320/info A vulnerability in PAM allows local malicious users to brute force passwords via the su command without any logging of their activity. su is a command that allows users to change identifies by supplying a password. If the password is correct su...