CVE-1999-1345

AutoFTP.pl script in AutoFTP 0.2 uses the /tmp/ftptmp as a shared directory with insecure permissions, which allows local users to 1 send arbitrary files to the remote server by placing them in the directory, and 2 view files that are being transferred...

CVE-1999-0342

Linux PAM modules allow local users to gain root access using temporary files...

CVE-1999-0325

vheumnt program in HP-UX allows local users to create root files through symlinks...

CVE-1999-0013

Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user...

CVE-1999-0135

admintool in Solaris allows a local user to write to arbitrary files and gain root access...

CVE-1999-0108

The connected documents corroborate CVE-1999-0108: a local buffer overflow in the IRIX printers program can grant root access to local users. The vulnerability arises in the printers utility on IRIX; details beyond the existence of a buffer overflow and local privilege escalation are not provided...

CVE-1999-0087

Denial of service in AIX telnet can freeze a system and prevent users from accessing the server...

CVE-1999-0367

NetBSD netstat command allows local users to access kernel memory...

CVE-1999-0087

CVE-1999-0087 describes a denial-of-service issue affecting the AIX telnet service, where the system can be frozen and become inaccessible to users. The connected documents consistently identify the vulnerability as impacting AIX Telnet and note the outcome as a potential system stall, but they d...

CVE-1999-0132

Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root access...

CVE-1999-0310

HP-UX SSH 1.2.25 is vulnerable (CVE-1999-0310): it allows access to new user accounts. This is confirmed across NVD/Red Hat/PT-Security records. The exact root cause isn’t spelled out in the available documents, but the impact aligns with elevated access risk (networked). Remediation: update to a...

CVE-1999-0334

In Solaris 2.2 and 2.3, when fsck fails on startup, it allows a local user with physical access to obtain root access...

CVE-1999-0334

CVE-1999-0334 affects Solaris 2.2–2.3. When fsck fails at startup, a local user with physical access can obtain root privileges (root access). Root cause: startup fsck issue allowing escalation on physical access. Impact: local privilege escalation with full system compromise potential if attacke...

CVE-1999-1534

Buffer overflow in 1 nlservd and 2 rnavc in Knox Software Arkeia backup product allows local users to obtain root access via a long HOME environmental variable...

CVE-1999-0708

Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field...

crontab_exploit.txt

Subject: Vixie Crontab exploit code To: [email protected] Vixie Crontab exploit code begin vixie-ex ---------------------------------------------------------------------- !/bin/sh Vixie crontab exploit Local user can gain root access. Tested redhat linux : 4.2, 5.0, 5.1, 6.0 Tested vixie...

SSH Communications Security SSH 1.2.27 - Authentication Socket File Creation

SSH Communications Security SSH 1.2.27 - Authentication Socket File Creation source: https://www.securityfocus.com/bid/660/info A vulnerability in SSH's creation of the authentication agent UNIX domain socket allows local users to create a UNIX domain socket with an arbitrary file name in the...

CVE-1999-0697

SCO Doctor allows local users to gain root privileges through a Tools option...

Microsoft Internet Explorer 5 - FTP Password Storage

Microsoft Internet Explorer 5 - FTP Password Storage Microsoft Internet Explorer 5.0 for Windows 2000/Windows NT 4 FTP Password Storage Vulnerability source: https://www.securityfocus.com/bid/610/info FTP usernames and passwords for sites accessed via Internet Explorer 5.X are stored cleartext in...

pegasus.mail.passwd.txt

Date: Sat, 15 May 1999 12:42:12 +0000 From: galldor To: [email protected] Subject: Pegasus Mail weak encryption --------------------------------------------------------------------- Pegasus Mail Weak Encryption Versions Effected: ALL but I wrote about the V2 encryption on 3.0+ Bug Found by:...