Linbert.txt

Vulnerability: Any user can overwrite any file in the system. title=Linberto v1.0.2 Q-Bert clone [email protected] Diego Javier Grigna system=Linux, svgalib [email protected] Grampa Elite Overview: Linberto under default installation creates screenshots under the /tmp directory wh...

CVE-1999-0559

A system-critical Unix file or directory has inappropriate permissions...

CVE-1999-0522

The CVE-1999-0522 issue concerns inappropriate permissions on a system-critical NIS+ table (e.g., passwd). The Red Hat entry repeats the same description, indicating the root cause is improper permissions on NIS+ tables. The NVD entry lists a high impact with confidentiality, integrity, and avail...

CVE-1999-0621

...

CVE-1999-0530

A system is operating in "promiscuous" mode which allows it to perform packet sniffing...

solaris.chkperm+arp.txt

Greetings, OVERVIEW /usr/vmsys/bin/chkperm and /usr/sbin/arp can be used to read bin-owned files. BACKGROUND All my testing was done on Solaris 2.7 and 2.6 SPARC edition. DETAILS Vuln 1 - chkperm This one isn't nearly as interesting as the instant-shell variety. Here's how it works: chkperm is...

Security Patches for Slackware 7.0 Available

...

CA-99-13: wu-ftpd upgrade available

...

CVE-1999-0484

Buffer overflow in OpenBSD ping...

SuSE_overflow_exploit.txt

Greetings, My last post regarding a sccw exploit simply allowed any user to read any file on the system but, of course, didn't yield any instant root. A much more serious problem now exists in the form of a HOME environment variable buffer overflow. If you hadn't removed the s-bit before, now is...

GNU Ffingerd 1.19 - 'Username' Validity Disclosure

source: https://www.securityfocus.com/bid/1841/info A vulnerability in Ffingerd version 1.19, the popular remote user-information server, which allows a remote user to determine whether or not a given username exists on the system. Normally, if a user has declined to be open to finger requests, a...

shadow.passwds.txt

Date: Fri, 11 Jun 1999 10:11:29 EET From: Emils Klotins To: [email protected] Subject: useradd -p stores cleartext passwords / shadow-980724 Hello. Sorry if this is reported already. Didn't find it in Bugtraq archives nor in SuSE support db. OS: SuSE Linux 6.1 Program: useradd Package:...

solaris.2.5.su.expect.txt

Date: Thu, 10 Jun 1999 14:13:06 -0500 From: Dr. Mudge To: [email protected] Subject: Solaris 2.5 /bin/su was: vulnerability in su/PAM in redhat The same sort of problem existed in solaris /bin/su on 2.5 and below. The comments in the quick proof of concept sploit below should explain further h...

quake2-more-bof.txt

Date: Fri, 22 Jan 1999 19:48:26 +0100 From: Patrick Oonk To: [email protected] Subject: More Quake2 buffer overflows and nuisances This was forwarded to me by Roderick van Domburg, Quake II admin at GamePoint www.gamepoint.net ----- Forwarded message from Roderick 'GoG' van Domburg ----- From...

nt.iis.odbc.vba.txt

Date: Tue, 25 May 1999 13:59:30 -0500 From: .rain.forest.puppy. To: [email protected] Subject: Advisory: NT ODBC Remote Compromise -- Advisory: NT ODBC Remote Compromise -- By Matthew Astley RCPS http://www.fruitcake.demon.co.uk -- & Rain Forest Puppy WireTrip [email protected] -- Brief Summary...

BSDLinux Kernel 2.3 (BSDOS 4.0 FreeBSD 3.2 NetBSD 1.4) - Shared Memory Denial of Service

BSDLinux Kernel 2.3 BSDOS 4.0 FreeBSD 3.2 NetBSD 1.4 - Shared Memory Denial of Service / source: https://www.securityfocus.com/bid/526/info Operating systems with a shared memory implementation based on or influenced by the 4.4BSD code may be vulnerable to a denial of service attack The problem...

Portal of Doom Backdoor Detection

Portal of Doom is installed. This backdoor allows anyone to partially take the control of the remote system. An attacker may use it to steal your password or prevent your from working properly. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

CVE-1999-0636

The discard service is running...

CVE-1999-0560

A system-critical Windows NT file or directory has inappropriate permissions...

CVE-1999-0637

The systat service is running...