CVE-2000-0038

CVE-2000-0038 concerns glFtpD (glftpd) software where a default glftpd user account exists with a default password and a UID of 0. The vulnerability is tied to this account’s privileged UID, enabling potential unauthorized access or privilege elevation. The PT-1999-1846 entry notes affected versi...

CVE-1999-0169

This entry documents CVE-1999-0169 affecting NFS, where an attacker can read and write any file on the system by specifying a false UID. The vulnerability centers on the NFS service’s UID handling, enabling full confidentiality and integrity/availability impact per the provided metrics. Connected...

CVE-1999-0555

CVE-1999-0555 describes a UID 0 issue where a Unix account whose name is not "root" has root privileges. Multiple connected sources corroborate that any non-root-named account can effectively gain full control, exposing complete confidentiality, integrity, and availability impact. Red Hat and PT-...

CVE-1999-0555

A Unix account with a name other than "root" has UID 0, i.e. root privileges...

CVE-2000-0038

glFtpD includes a default glftpd user account with a default password and a UID of 0...

CVE-1999-0556

Two or more Unix accounts sharing the same UID is the core issue described for CVE-1999-0556. Affected systems are Unix-based where UID collisions can enable unauthorized access or privilege escalation because multiple accounts map to the same user identifier. Connected sources corroborate the de...

CVE-1999-0556: Undefined Security Weakness

Two or more Unix accounts have the same UID...

CVE-2000-0038: Undefined Security Weakness

glFtpD includes a default glftpd user account with a default password and a UID of 0...

CVE-1999-0169: Undefined Security Weakness

NFS allows attackers to read and write any file on the system by specifying a false UID...

CVE-1999-0555: Undefined Security Weakness

A Unix account with a name other than "root" has UID 0, i.e. root privileges...

CVE-2000-0038

glFtpD includes a default glftpd user account with a default password and a UID of 0...

RFP9905.zeus.remote.root.txt

--- Advisory RFP9905 ------------------------------- rfp.labs ----------- Remote root compromise via Zeus webserver Zeus-search vulnerability --------------------------------- rain forest puppy / [email protected] -- Table of contents: - 1. Scope of problem - 2. Solution - 3. Miscellaneous Updates...

CVE-1999-0084

CVE-1999-0084 affects certain NFS servers . The vulnerability permits a local user to perform a privileged action by running mknod to create a writable kmem device and set the UID to 0, effectively enabling a privilege escalation to root as described in the provided sources. Multiple connected do...

CVE-1999-0084: Improper Privilege Management

Certain NFS servers allow users to use mknod to gain privileges by creating a writable kmem device and setting the UID to 0...

sun.5.6.lpset.txt

Date: Tue, 11 May 1999 11:43:46 +0900 From: kim yong-jun homepage=ce.hannam.ac.kr/s96192 To: [email protected] Subject: SunOS 5.6 X86 lpset vulnerability This is my second post to ButTraq. If this is old, I'm sorry. It's buffer overflow in "/usr/bin/lpset". View this command : loveyou@/ %...

shadow.root.uid.65536.txt

Date: Mon, 24 May 1999 20:44:28 +0200 From: Lord Evil To: [email protected] Subject: UID 65536 and shadow-19990307 Recently one of our admins installed the shadow-19990307 package. While playing around I noticed that if a new user is created with UID 65536, he will become root upon login. No...

kde.kmail.tmp.dir.txt

Date: Wed, 9 Jun 1999 14:52:49 -0700 From: [email protected] Reply-To: X-Force To: [email protected] Subject: ISSalert: ISS Security Advisory: KDE K-Mail File Creation Vulnerability TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact...

netbsd.umapfs.txt

Date: Thu, 18 Mar 1999 00:03:40 +1100 From: matthew green To: [email protected] Subject: NetBSD Security Advisory 1999-006 -----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 1999-006 ================================= Topic: Security hole in umapfs Version: NetBSD 1.3.3 and prior;...

Linux Kernel 2.0.37 - Segment Limit Privilege Escalation

Linux Kernel 2.0.37 - Segment Limit Privilege Escalation / source: https://www.securityfocus.com/bid/523/info This vulnerability has to do with the division of the address space between a user process and the kernel. Because of a bug, if you select a non-standard memory configuration, sometimes...

IBM AIX 4.3 - 'infod' Local Privilege Escalation

/ source: https://www.securityfocus.com/bid/370/info Certain versions of AIX ship with an Information Daemon, infod. This program is designed to provide information about the OS and installed ancilliary programs. The daemon which runs as root, does not check credentials which are passed to it. Th...