2131 matches found
CVE-1999-0530
A system is operating in "promiscuous" mode which allows it to perform packet sniffing...
CVE-1999-0559
A system-critical Unix file or directory has inappropriate permissions...
solaris.chkperm+arp.txt
Greetings, OVERVIEW /usr/vmsys/bin/chkperm and /usr/sbin/arp can be used to read bin-owned files. BACKGROUND All my testing was done on Solaris 2.7 and 2.6 SPARC edition. DETAILS Vuln 1 - chkperm This one isn't nearly as interesting as the instant-shell variety. Here's how it works: chkperm is...
Security Patches for Slackware 7.0 Available
...
CA-99-13: wu-ftpd upgrade available
...
CVE-1999-0484
Buffer overflow in OpenBSD ping...
SuSE_overflow_exploit.txt
Greetings, My last post regarding a sccw exploit simply allowed any user to read any file on the system but, of course, didn't yield any instant root. A much more serious problem now exists in the form of a HOME environment variable buffer overflow. If you hadn't removed the s-bit before, now is...
GNU Ffingerd 1.19 - 'Username' Validity Disclosure
source: https://www.securityfocus.com/bid/1841/info A vulnerability in Ffingerd version 1.19, the popular remote user-information server, which allows a remote user to determine whether or not a given username exists on the system. Normally, if a user has declined to be open to finger requests, a...
shadow.passwds.txt
Date: Fri, 11 Jun 1999 10:11:29 EET From: Emils Klotins To: [email protected] Subject: useradd -p stores cleartext passwords / shadow-980724 Hello. Sorry if this is reported already. Didn't find it in Bugtraq archives nor in SuSE support db. OS: SuSE Linux 6.1 Program: useradd Package:...
quake2-more-bof.txt
Date: Fri, 22 Jan 1999 19:48:26 +0100 From: Patrick Oonk To: [email protected] Subject: More Quake2 buffer overflows and nuisances This was forwarded to me by Roderick van Domburg, Quake II admin at GamePoint www.gamepoint.net ----- Forwarded message from Roderick 'GoG' van Domburg ----- From...
solaris.2.5.su.expect.txt
Date: Thu, 10 Jun 1999 14:13:06 -0500 From: Dr. Mudge To: [email protected] Subject: Solaris 2.5 /bin/su was: vulnerability in su/PAM in redhat The same sort of problem existed in solaris /bin/su on 2.5 and below. The comments in the quick proof of concept sploit below should explain further h...
nt.iis.odbc.vba.txt
Date: Tue, 25 May 1999 13:59:30 -0500 From: .rain.forest.puppy. To: [email protected] Subject: Advisory: NT ODBC Remote Compromise -- Advisory: NT ODBC Remote Compromise -- By Matthew Astley RCPS http://www.fruitcake.demon.co.uk -- & Rain Forest Puppy WireTrip [email protected] -- Brief Summary...
BSDLinux Kernel 2.3 (BSDOS 4.0 FreeBSD 3.2 NetBSD 1.4) - Shared Memory Denial of Service
BSDLinux Kernel 2.3 BSDOS 4.0 FreeBSD 3.2 NetBSD 1.4 - Shared Memory Denial of Service / source: https://www.securityfocus.com/bid/526/info Operating systems with a shared memory implementation based on or influenced by the 4.4BSD code may be vulnerable to a denial of service attack The problem...
Portal of Doom Backdoor Detection
Portal of Doom is installed. This backdoor allows anyone to partially take the control of the remote system. An attacker may use it to steal your password or prevent your from working properly. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
CVE-1999-0636
The discard service is running...
CVE-1999-0637
The systat service is running...
CVE-1999-0560
A system-critical Windows NT file or directory has inappropriate permissions...
IBM Scalable POWERparallel (SP) 2.0 - sdrd File Read
IBM Scalable POWERparallel SP 2.0 - sdrd File Read / source: https://www.securityfocus.com/bid/371/info There is a vulnerability in the System Data Repository SDR subsystem. The SDR subsystem is used in IBM SP multi-machine parallel processing environments typically associated with Super Computin...
Sun Solaris 2.6 - power management
Sun Solaris 2.6 - power management source: https://www.securityfocus.com/bid/160/info A vulnerability exists in Sun's power management software under Solaris versions 2.4-2.6 although only 2.6 as part of the main distribution. The sys-suspend program is initiated when a user runs the program, or...