LIDS severe bug

Hi. Didn't see a message regarding this one here, so here we go... This is from the Linux Intrusion Detection System LIDS/www.lids.org mailing list. Basically LIDS 0.9.7 for kernel 2.2.16 breaks the system so that every user is acting as uid=0 when the system has been started with /security=0 at...

CVE-2000-0559

eTrust Intrusion Detection System formerly SessionWall-3 uses weak encryption XOR to store administrative passwords in the registry, which allows local users to easily decrypt the passwords...

CVE-2000-0559

The CVE-2000-0559 entry describes a vulnerability in eTrust Intrusion Detection System (formerly SessionWall-3) where administrative passwords stored in the registry are protected with weak XOR encryption. The underlying issue is the weak encryption implementation, enabling a local attacker to de...

CVE-2000-0559: Undefined Security Weakness

eTrust Intrusion Detection System formerly SessionWall-3 uses weak encryption XOR to store administrative passwords in the registry, which allows local users to easily decrypt the passwords...

CVE-2000-0559

eTrust Intrusion Detection System formerly SessionWall-3 uses weak encryption XOR to store administrative passwords in the registry, which allows local users to easily decrypt the passwords...

CVE-1999-0598

CVE-1999-0598 describes a vulnerability where a network intrusion detection system (IDS) fails to properly handle out-of-order packets, enabling evasion of detection. The connected sources reiterate the issue but do not specify any affected product, vendor, or version in these documents. The CVSS...

CVE-1999-0601

CVE-1999-0601 affects a network intrusion detection system (IDS) and is caused by improper handling of data within TCP handshake packets. The public records (NVD, CVE list, Red Hat entry) describe the vulnerability as an IDS failing to process TCP handshake data correctly, with a base CVSS v2.0 s...

CVE-1999-0602

Technical specifics (affected products/versions, root cause, exploitability and fixes) are not provided in the supplied documents. Monitor Red Hat, NVD and related feeds for updates and confirmed details.

CVE-1999-0598

A network intrusion detection system IDS does not properly handle packets that are sent out of order, allowing an attacker to escape detection...

CVE-1999-0599

Technical details (affected product/versions/root cause/fix) are not publicly available in the provided documents. Monitor for updates.

CVE-1999-0598: Undefined Security Weakness

A network intrusion detection system IDS does not properly handle packets that are sent out of order, allowing an attacker to escape detection...

CVE-1999-0602: Undefined Security Weakness

A network intrusion detection system IDS does not properly reassemble fragmented packets...

CVE-1999-0599: Undefined Security Weakness

A network intrusion detection system IDS does not properly handle packets with improper sequence numbers...

CVE-1999-0600: Undefined Security Weakness

A network intrusion detection system IDS does not verify the checksum on a packet...

Ethereal 0.8.40.8.50.8.6 tcpdump 3.43.5 alpha - DNS Decode (1)

Ethereal 0.8.40.8.50.8.6 tcpdump 3.43.5 alpha - DNS Decode 1 // source: https://www.securityfocus.com/bid/1165/info A vulnerability exists in the DNS decode capabilities provided as part of the tcpdump sniffer, from LBL, as well as other sniffers, including Ethereal, by Gerald Combs. These sniffe...

PT-1999-1220 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A network intrusion detection system IDS does not properly reassemble fragmented packets. This issue may lead to potential security risks, but specific details about affected device...

PT-1999-1219 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A network intrusion detection system IDS does not properly handle data within TCP handshake packets. Recommendations: At the moment, there is no information about a newer version th...

PT-1999-1216 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A network intrusion detection system IDS does not properly handle packets that are sent out of order, allowing an attacker to escape detection. Recommendations: At the moment, there...

PT-1999-1218 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A network intrusion detection system IDS fails to verify the checksum on a packet. This issue may allow unauthorized access or malicious activity to go undetected. Recommendations: ...

PT-1999-1217 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A network intrusion detection system IDS fails to properly handle packets that contain improper sequence numbers. Recommendations: At the moment, there is no information about a new...