CVE-2000-1221

The line printer daemon lpd in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by...

CVE-1999-0703

OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices...

ZBServer Pro 1.5 - Remote Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/889/info ZBSoft ZBServer Pro is an Internet and Intranet server that supports HTTP, Gopher, FTP and Chat Services. ZBServer is available for Microsoft Windows operating systems. ZBServer Pro 1.5 has an unchecked buffer in the code that handles GET...

ZBServer Pro 1.5 - Remote Buffer Overflow (1)

ZBServer Pro 1.5 - Remote Buffer Overflow 1 source: https://www.securityfocus.com/bid/889/info ZBSoft ZBServer Pro is an Internet and Intranet server that supports HTTP, Gopher, FTP and Chat Services. ZBServer is available for Microsoft Windows operating systems. ZBServer Pro 1.5 has an unchecked...

Microsoft Internet Explorer 5 (Windows 95982000NT 4.0) - XML HTTP Redirect

Microsoft Internet Explorer 5 Windows 95982000NT 4.0 - XML HTTP Redirect MS IE 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4 XML HTTP Redirect Vulnerability source: https://www.securityfocus.com/bid/815/info A vulnerability in the method IE5 uses to process XML data may allow a maliciou...

CVE-1999-1357

Netscape Communicator 4.04 through 4.7 and possibly other versions in various UNIX operating systems converts the 0x8b character to a "" sign, which could allow remote attackers to attack other clients via cross-site scripting CSS in CGI programs that do not filter these characters...

CVE-1999-0305

The system configuration control sysctl facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed packets even when the 1 dosourceroute or 2 forwarding variables are set, which allows remote attackers to spoof TCP...

os-fingerprinting.txt

Date: Mon, 28 Dec 1998 16:16:40 -0700 From: David G. Andersen To: [email protected] Subject: A few more fingerprinting techniques - time and netmask The release of nmap reminded me about some work I did a while ago for yet-more-information-gathering-programs, and I thought it might be...

ns4.5-mail-passwd.txt

Date: Wed, 4 Nov 1998 18:29:55 +0100 From: Holger van Lengerich To: [email protected] Subject: Communicator 4.5 stores EVERY mail-password in preferences.js Hi! The Netscape Communicator 4.5 stores the crypted version of used mail-passwords for imap and pop3 even if you tell Netscape to not...

netscape.4.5.talkback.txt

Date: Fri, 19 Mar 1999 22:45:02 -0800 From: Aleph One To: [email protected] Subject: Security hole in Netscape Communicator's 4.5 "talkback" function SuSE Security Announcement Package: netscape-4.5-9 Date: Thu Mar 18 10:22:11 CET 1999 Affected: unix operating systems using netscape communicat...

windows.time-date.bug.txt

Date: Tue, 23 Mar 1999 15:20:55 -0500 From: Brett Robins To: [email protected] Subject: Time/Date bug in Windows' OSes Although not a security bug, this certainly is a potentially large bug in my eyes. You can accidentally change the systems date/time by using the calendar function...

tcpdump.3.4.dos.txt

Date: Wed, 1 Jan 1986 16:30:10 +0100 From: badi To: [email protected] Subject: tcpdump 3.4 bug? / tcpdump bug 3.4a? by BLADI [email protected]; On receiving an ip packet with Protocol-4 and ihl=0, tcpdump enters an infinite loop within the procedure ipprint from file printip.c This happens...

Xi Graphics Maximum CDE 1.2.3TriTeal TED CDE 4.3Sun Solaris 2.5.1 - ToolTalk RPC Service Overflow (2)

Xi Graphics Maximum CDE 1.2.3TriTeal TED CDE 4.3Sun Solaris 2.5.1 - ToolTalk RPC Service Overflow 2 // source: https://www.securityfocus.com/bid/122/info An implementation fault in the ToolTalk object database server allows a remote attacker to run arbitrary code as the superuser on hosts...

Xi Graphics Maximum CDE 1.2.3/TriTeal TED CDE 4.3/Sun Solaris 2.5.1 - ToolTalk RPC Service Overflow (2)

// source: https://www.securityfocus.com/bid/122/info An implementation fault in the ToolTalk object database server allows a remote attacker to run arbitrary code as the superuser on hosts supporting the ToolTalk service. The affected program runs on many popular UNIX operating systems supportin...

Xi Graphics Maximum CDE 1.2.3TriTeal TED CDE 4.3Sun Solaris 2.5.1 - ToolTalk RPC Service Overflow (1)

Xi Graphics Maximum CDE 1.2.3TriTeal TED CDE 4.3Sun Solaris 2.5.1 - ToolTalk RPC Service Overflow 1 // source: https://www.securityfocus.com/bid/122/info An implementation fault in the ToolTalk object database server allows a remote attacker to run arbitrary code as the superuser on hosts...

Xi Graphics Maximum CDE 1.2.3/TriTeal TED CDE 4.3/Sun Solaris 2.5.1 - ToolTalk RPC Service Overflow (1)

// source: https://www.securityfocus.com/bid/122/info An implementation fault in the ToolTalk object database server allows a remote attacker to run arbitrary code as the superuser on hosts supporting the ToolTalk service. The affected program runs on many popular UNIX operating systems supportin...

Hylafax Faxsurvey Remote Command Execution (CVE-1999-0262)

Hylafax is a fax server software package designed to run on different UNIX operating systems. Unpatched version of Hylafax ships with an insecure script, faxsurvey, which allows remote command execution with the privileges of the web server process. Remote attackers can exploit this vulnerability...

Hylafax 4.0 pl2 Faxsurvey - Remote Command Execution

source: https://www.securityfocus.com/bid/2056/info Hylafax is a popular fax server software package designed to run on multiple UNIX operating systems. Unpatched version of Hylafax ship with an insecure script, faxsurvey, which allows remote command execution with the privileges of the web serve...

CVE-1999-0305

The system configuration control sysctl facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed packets even when the 1 dosourceroute or 2 forwarding variables are set, which allows remote attackers to spoof TCP...

FreeBSD 2.x HP-UX 91011 Kernel 2.0.3 Windows NT 4.0Server 2003 NetBSD 1 - land.c loopback Denial of Service (3)

FreeBSD 2.x HP-UX 91011 Kernel 2.0.3 Windows NT 4.0Server 2003 NetBSD 1 - land.c loopback Denial of Service 3 / source: https://www.securityfocus.com/bid/2666/info A number of TCP/IP stacks are vulnerable to a "loopback" condition initiated by sending a TCP SYN packet with the source address and...