PT-2000-1016 · Linux +2 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The system fails to display an appropriate legal message or warning to users when they access it. Recommendations: At the moment, there is no information about a newer version that...

Security Advisory 2000-006

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2000-006 ================================= Topic: /etc/ftpchroot parsing broken in NetBSD-1.4.2 Version: NetBSD 1.4.2 only Severity: medium to high if using /etc/ftpchroot, none if not. Abstract ======== A fix which attempted to make...

Qpopper EUIDL Arbitrary Command Execution

The remote version of the Qpopper POP server contains a bug that could allow authenticated users who have a pop account to gain a shell with the gid 'mail' by sending to themselves a specially crafted mail. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10423;...

Local DoS : RedHat 6.0

Hello, I'm not sure if this problem has ever been addressed or not, but considering that I just spent a day recovering from a corrupted root partition and this can be done by any user with window manager access, I thought this might be worth mentioning anyway. While killing yet another zombie...

Pacific Software Carello 1.2.1 - File Duplication Source Disclosure

Pacific Software Carello 1.2.1 - File Duplication Source Disclosure source: https://www.securityfocus.com/bid/1245/info A remote user can gain read and write access on a target machine running Carello shopping cart software. First, a user may create a duplicate of a known file in a known director...

BUFFER OVERRUN VULNERABILITIES IN KERBEROS

-----BEGIN PGP SIGNED MESSAGE----- BUFFER OVERRUN VULNERABILITIES IN KERBEROS SUMMARY: Serious buffer overrun vulnerabilities exist in many implementations of Kerberos 4, including implementations included for backwards compatibility in Kerberos 5 implementations. Other less serious buffer overru...

rm.racecondition

Synopsis: If root ever does "rm -rf /tmp/foo" for a directory structure not completely owned by root, a local user can delete all files that root can. Such deletions are common for a /tmp cleanup and b before creating a specific directory in /tmp/. Details: "rm -r" implementations Solaris 7, Gnu...

sses-sshauth.txt

Sword & Shield Enterprise Security, Inc. - Security Advisory www.sses.net, Copyright c 2000 Advisory: Secure Shell Authentication Vulnerability Release Date: May 10, 2000 Application: sshd Severity: High - A user local or remote can log into any account with a valid login shell. Status: Affected...

CVE-2000-0407

Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option...

CVE-2000-0249

The AIX Fast Response Cache Accelerator FRCA allows local users to modify arbitrary files via the configuration capability in the frcactrl program...

CVE-2000-0250

The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords...

CVE-1999-0824

A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the location of folders accessed by later users...

CVE-1999-0957

MajorCool mjkeycache program allows local users to modify files via a symlink attack...

CVE-2000-0317

Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option...

FreeBSD-SA-00:15.imap-uw

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:15 Security Advisory FreeBSD, Inc. Topic: imap-uw allows local users to deny service to any mailbox Category: ports Module: imap-uw Announced: 2000-04-24 Credits: Alex...

3R Soft MailStudio 2000 2.0 - 'userreg.cgi' Arbitrary Command Execution

// source: https://www.securityfocus.com/bid/1335/info MailStudio 2000 is vulnerable to multiple attacks. It is possible for a remote user to gain read access to all files located on the server via the usage of the "/.." string passed to a CGI, thereby compromising the confidentiality of other...

Переполнение буфера в WU-IMAPD

Переполнение буфера в команде list "" buffer после авторизации пользователя. Пользователь не сможет повысить привелегии, но это позволяет пользователю имеющему только почтовый доступ получить шел-доступ к машине...

CVE-2000-0336

Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack...

SuSE Linux 6.x - Arbitrary File Deletion

SuSE Linux 6.x - Arbitrary File Deletion source: https://www.securityfocus.com/bid/1130/info A vulnerability exists in SuSE Linux, version 6.3 and prior, that can allow arbitrary users to delete any file on the system. If the MAXDAYSINTMP variable is set in /etc/rc.config to be larger than 0, any...

FreeBSD-SA-00:13.generic-nqs

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:13 Security Advisory FreeBSD, Inc. Topic: generic-nqs contains a local root compromise Category: ports Module: generic-nqs Announced: 2000-04-19 Credits: Philippe...