CVE-1999-1158

Buffer overflow in 1 pluggable authentication module PAM on Solaris 2.5.1 and 2.5 and 2 unixscheme in Solaris 2.4 and 2.3 allows local users to gain root privileges via programs that use these modules such as passwd, yppasswd, and nispasswd...

CVE-1999-1101

Kabsoftware Lydia utility uses weak encryption to store user passwords in the lydia.ini file, which allows local users to easily decrypt the passwords and gain privileges...

CVE-1999-1304

Vulnerability in login in SCO UNIX 4.2 and earlier allows local users to gain root access...

CVE-1999-1561

Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file scserv.conf, which could allow a local user to gain administrative privileges on the server...

CVE-1999-1345

CVE-1999-1345 affects the Auto_FTP 0.2 setup where the Auto_FTP.pl script uses the /tmp/ftp_tmp directory as a shared area with insecure permissions. This misconfiguration allows local users to: (1) place arbitrary files into the shared directory to be sent to the remote server, and (2) view file...

CVE-1999-1268

Vulnerability in KDE konsole allows local users to hijack or observe sessions of other users by accessing certain devices...

CVE-1999-1405

snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which could allow local users to access the shadowed password file by creating /tmp/ibmsupt/general/passwd before root runs snap...

CVE-1999-1251

The CVE-1999-1251 entry describes a vulnerability in direct audio user space code on HP-UX 10.20 and 10.10 that allows local users to cause a denial of service. The affected component is the direct audio user space code; root cause details are not provided in the documents. Impact is limited to a...

CVE-1999-1366

Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily decrypt the passwords and read e-mail...

CVE-1999-1239

HP-UX 9.x does not properly enable the Xauthority mechanism in certain conditions, which could allow local users to access the X display even when they have not explicitly been authorized to do so...

CVE-1999-1242

Technical details (affected product, vulnerable component, exploitability, or patch information) are not publicly provided in the connected documents for CVE-1999-1242; monitor for updates.

CVE-1999-1370

The setup wizard ie5setup.exe for Internet Explorer 5.0 disables 1 the screen saver, which could leave the system open to users with physical access if a failure occurs during an unattended installation, and 2 the Task Scheduler Service, which might prevent the scheduled execution of...

CVE-1999-1475

ProFTPd 1.2 compiled with the modsqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privileges by reading wtmp, e.g. via the last command...

CVE-1999-1172

By design, Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modify the calendar of other users when the calendar is being shared...

CVE-1999-1282

The CVE-1999-1282 entry concerns RealSystem G2 server where the administrator password is stored in cleartext in a world-readable configuration file. The underlying impact is that local users can gain privileges on the affected system due to this configuration weakness. The provided documents do ...

CVE-1999-1071

Excite for Web Servers EWS 1.1 installs the Architext.conf authentication file with world-writeable permissions, which allows local users to gain access to Excite accounts by modifying the file...

CVE-1999-1277

The CVE-1999-1277 issue affects the BackWeb client, where the proxy authentication username and password are stored in cleartext in the Communication registry key. This exposes credentials to other local users, enabling potential privilege escalation through password reading. Root cause: credenti...

CVE-1999-1534

Buffer overflow in 1 nlservd and 2 rnavc in Knox Software Arkeia backup product allows local users to obtain root access via a long HOME environmental variable...

CVE-1999-1554

/usr/sbin/Mail on SGI IRIX 3.3 and 3.3.1 does not properly set the group ID to the group ID of the user who started Mail, which allows local users to read the mail of other users...

security alert: speechd from speechio.org

this is my first post in this kin of thing so bare with me. there is a vulnerability in speechd that alllows you to run arbetrary code as the root user or whoever is running speechd hopefully not root!. it will only work if you are using rsynth, that is all i have tested, it may work on festival...