CVE-2000-1103

CVE-2000-1103 affects BSD 3.0/4.0; the rcvtty program does not drop privileges before executing a script, enabling local privilege escalation by supplying an alternate Trojan horse script on the command line. CVSS base score 7.2 (HIGH) from NVD indicates complete impact to confidentiality, integr...

CVE-2000-1103

rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by specifying an alternate Trojan horse script on the command line...

AnalogX Proxy Server Buffer Overflow Vulnerability

From "zer0-logic" [email protected]: Network Security Solutions Inc. Security Advisory Philippine based Security Company Http://www.nssolution.net Http://connect.to/nssi AnalogX Proxy Server DoS/Buffer Overflow Vulnerabilty Author: Abraham Lincoln H. Handle: zer0logic Email :...

CVE-2000-0880

The CVE-2000-0880 entry concerns LPPlus creating the lpdprocess file with world-writable permissions, which allows local users to kill arbitrary processes by specifying a process ID and using the setuid dcclpdshut program to terminate the specified process. Impact is local access and partial inte...

CVE-2000-0318

Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot .. attack...

CVE-2000-0468

man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack...

CVE-2000-0695

The CVE-2000-0695 entry relates to buffer overflows in the pgxconfig component of the Raptor GFX configuration tool, enabling local users to escalate privileges via crafted command line options. Affected software is the pgxconfig utility within Raptor GFX; the underlying issue is a buffer overflo...

IRIX 6.5.x - usrsbindmplay Local Buffer Overflow

IRIX 6.5.x - usrsbindmplay Local Buffer Overflow / source: https://www.securityfocus.com/bid/1528/info Certain versions of IRIX ship with a version of dmplay which is vulnerable to a buffer overflow attack. The program, dmplay, is used to play movie files under IRIX. The problem at hand is the wa...

Дырки в Secure desktop

Локальные и удаленный возможности для DoS-атаки, включая подмену адреса default gateway...

CVE-2000-0468

man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack...

CVE-2000-0224

The CVE-2000-0224 entry refers to ARCserve agent on SCO UnixWare 7.x. The vulnerability is a local privilege escalation via a symlink attack that could allow a local attacker to obtain root privileges. The description clearly states the affected product/component and the root cause (symlink-relat...

CVE-2000-0184

Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords...

CVE-2000-0155

Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other users access a drive...

CVE-1999-0480

Midnight Commander 4.x is affected by a local denial of service via a symlink attack. The connected PT-1999-1160 entry confirms the issue in Midnight Commander 4.x and attributes it to a symlink-based condition exploitable by a local attacker to trigger DoS. No remediation or patched versions are...

CVE-2000-0107

Linux apcd program allows local attackers to modify arbitrary files via a symlink attack...

[SECURITY] New version of nvi released

Package: nvi Vulnerability type: local attack Debian-specific: no The version of nvi that was distributed with Debian GNU/Linux 2.1 has an error in the default /etc/init.d/nviboot script: it did not handle filenames with embedded spaces correctly. This made it possible to remove files in the root...

CVE-1999-0439

The CVE-1999-0439 issue is a Buffer Overflow in procmail prior to 3.12. The vulnerability arises from expansions in the procmailrc configuration file, allowing remote or local attackers to execute commands. Exploitation is possible via the procmailrc processing and can impact confidentiality, int...

savant.dos.txt

Local / Remote D.o.S Attack in Savant Web Server V2.0 WIN9X / NT / 2K USSR Advisory Code: USSR-99026 Release Date: December 28, 1999 2/5 Systems Affected: Savant Web Server V2.0 Win9X / NT / 2K and possibly others versions. About The Software: Savant provides support for most modern web features...

CVE-1999-1497

Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts...

warftp.dos.txt

Local / Remote D.o.S Attack in War FTP Daemon 1.70 Vulnerability PROBLEM UssrLabs found a Local/Remote DoS Attack in War FTP Daemon 1.70 the buffer overflow is caused by a Multiples connections at the same time over 60 in the ftp server , and some characters in the login name. There is not much t...