562 matches found
Microsoft Windows Server 2000/95/98/ME/NT 3.5.x/Enterprise Server 4.0/Terminal Server 4.0/Workstation 4.0 Microsoft DoS Device Name - Denial of Service
Windows 2000 Advanced Server/2000 Datacenter Server/2000 Professional/2000 Server/95/98/ME/NT 3.5.x/NT Enterprise Server 4.0/NT Terminal Server 4.0/NT Workstation 4.0 MS DOS Device Name DoS Vulnerability source: https://www.securityfocus.com/bid/1043/info Due to an inherent fault within the...
CVE-2000-0143
The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP...
RedHat 6.1 / IRIX 6.5.18 - 'lpd' Command Execution
source: https://www.securityfocus.com/bid/927/info Multiple vulnerabilities have been discovered in lpd, shipped with various Linux and Unix distributions. It has been reported that lpd fails to properly authenticate hostnames. This could allow an unauthenticated user to gain access to lpd servic...
PHP 3.0.13 - 'Safe_mode' Failure
source: https://www.securityfocus.com/bid/911/info PHP Version 3.0 is an HTML-embedded scripting language. Much of its syntax is borrowed from C, Java and Perl with a couple of unique PHP-specific features thrown in. The goal of the language is to allow web developers to write dynamically generat...
SCO Unixware 7.1 - '/var/mail' Permissions
source: https://www.securityfocus.com/bid/849/info Certain versions of SCO's UnixWare only 7.1 was tested ship with the /var/mail/ directory with permission 777-rwxrwxrwx . This in effect allows malicious users to read incoming mail for users who do not yet have a mail file /var/mail/username...
Eric Allman Sendmail 8.8.x - Socket Hijack
Eric Allman Sendmail 8.8.x - Socket Hijack // source: https://www.securityfocus.com/bid/774/info Through exploiting a combination of seemingly low-risk vulnerabilities in sendmail, it is possible for a malicious local user to have an arbitrary program inherit or "hijack" the file descriptor for t...
CVE-1999-0141
CVE-1999-0141 concerns the Java Bytecode Verifier, where the verifier as implemented in the Java runtime allows malicious applets to execute arbitrary commands with the permissions of the applet user. The provided sources reiterate this description but do not specify affected products/versions, r...
CVE-1999-0466
The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device...
CVE-1999-0475
A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail...
CVE-1999-0341
Buffer overflow in the Linux mail program "deliver" allows local users to gain root access...
CVE-1999-0388
DataLynx suGuard trusts the PATH environment variable to execute the ps command, allowing local users to execute commands as root...
CVE-1999-0022
Local user gains root privileges via buffer overflow in rdist, via expstr function...
domain.nu.DoS.txt
Date: Sat, 20 Feb 1999 21:20:13 -0800 From: Shane Wegner To: [email protected] Subject: Possible DOS attack in the .nu domain service Hello all, I am not sure if this is known or even relevant to the list and if not, please excuse this post. There appears to be a bug in the niu DNS setup proce...
CVE-1999-0813
Cfingerd with ALLOWEXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local users to gain root privileges...
CVE-1999-0674
The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve...
CVE-1999-0803
The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack...
CVE-1999-1171
IPswitch WSFTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920...
CVE-1999-1434
login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, which prevents it from dropping privileges, causing it to assign root privileges to any local user who logs on to the server...
textcounter.pl 1.2 - Arbitrary Command Execution
textcounter.pl 1.2 - Arbitrary Command Execution source: https://www.securityfocus.com/bid/2265/info textcounter.pl is distributed through Matt's Scripts archive, and provides added features to httpd servers such as counters, guestbooks, and http cookie management. Due to insufficient checking of...