7685 matches found
OpenSSH < 2.1.1 UseLogin Local Privilege Escalation
According to its banner, the remote host appears to be running OpenSSH version older than 2.1.1. Such versions are reportedly affected by a local privilege esclation vulnerability. If the UseLogin option is enabled, then sshd does not switch to the uid of the user logging in. Instead, sshd relies...
INN < 2.2.3 verifycancels Option Cancel Request Message Overflow
The remote version of INN is between 2.0 and 2.2.2 There is a known security flaw in this version of INN which may allow an attacker to execute arbitrary code on this server is the option 'verifycancels' is enabled in inn.conf C Tenable Network Security, Inc. include"compat.inc"; ifdescription...
[COVERT-2000-06] Initialized Data Overflow in Xlock
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Network Associates, Inc. COVERT Labs Security Advisory May 29, 2000 Initialized Data Overflow in Xlock COVERT-2000-06 o Synopsis An implementation vulnerability in xlock allows global variables in the initialized data section of memory to be...
CVE-2000-0343: Undefined Security Weakness
Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FROM mail header...
FreeBSD 3.4/4.0/5.0 / NetBSD 1.4 - Unaligned IP Option Denial of Service
// source: https://www.securityfocus.com/bid/1173/info A vulnerability exists in the 1.4.x NetBSD kernel that may allow remote attackers to cause the machine to kernel panic on certain architectures. By sending a packet to a machine running the Alpha or SPARC versions of NetBSD, with an unaligned...
Solaris 2.6/7.0 - 'lpset -r' Local Buffer Overflow (3)
/ source: https://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. However, when supplied a well crafted buffer containing...
Solaris 2.6/7.0 - 'lpset -r' Local Buffer Overflow (2)
// source: https://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. However, when supplied a well crafted buffer containing...
Security Advisory: Cisco IOS Software TELNET Option Handling Vulnerability
Cisco IOS Software TELNET Option Handling Vulnerability Revision 1.0 For public release Thursday 2000/04/20 at 09:00 AM US/Eastern UTC-0400. --------------------------------------------------------------------------- Summary ======= A defect in multiple Cisco IOS software versions will cause a...
Cisco IOS Software TELNET Option Handling Vulnerability
...
MS IIS FrontPage 98 Extensions Buffer Overflow Vulnerability
Advisory ID Internal CORE-041200 1. Advisory Information Date Published: 2000-04-14 Last Update: 2000-04-14 Advisory ID: CORE-041200 Bugtraq ID: 1109 CVE Name: CVE-2000-0260 Title: MS IIS FrontPage 98 Extensions Buffer Overflow Vulnerability Class: Boundary Error Condition Buffer Overflow Remotel...
DVWSSR.dll Vulnerability in Microsoft IIS 4.0 Web Servers
The following is based on information gleaned from a variety of sources. According to the Wall Street Journal, the discoverer is an unnamed employee of ClientLogic. FYI, my comments to Ted Bridis of WSJ yesterday about the issue were made with very little info only the info he was supplied, so fo...
CVE-2000-0298
The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories...
CVE-1999-0193
CVE-1999-0193 affects Ascend and 3Com routers. The vulnerability causes a denial of service by rebooting devices when a zero-length TCP option is sent. The connected documents confirm the DoS impact and list affected hardware as Ascend and 3Com routers, with no explicit patch version or fix detai...
CVE-1999-0193
Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option...
CVE-1999-0840: Undefined Security Weakness
Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option...
CVE-1999-0193: Undefined Security Weakness
Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option...
CVE-1999-0462: Undefined Security Weakness
suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountable file system, e.g. a CD-ROM or floppy disk...
FreeBSD-SA-00:01.make
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:01 Security Advisory FreeBSD, Inc. Topic: Insecure temporary file handling in make1 Category: core Module: make Announced: 2000-01-19 Affects: All versions before the...
DEBIAN-CVE-2000-1220
The line printer daemon lpd in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file...