CVE-2000-0459

IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of service by filling up the disk space by requesting a large number of documents and prematurely stopping the request...

CVE-2000-0030

Solaris dmispd dmicmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database...

CVE-2000-0030

CVE-2000-0030 affects Solaris dmispd dmi_cmd, allowing a local user to exhaust restricted disk space by adding files to /var/dmi/db. The NVD entry lists a MEDIUM base score (5.0) with availability impact and no confidentiality/integrity impact, and indicates a local-access condition despite the C...

Проблема в SSH с Kerberos

При использовании Kerberos-авторизации ticket ползователя хранится в файле "none" текущей директории а не в /tmp. В том случае, когда текущий каталог находится на сетевом дисек, есть вероятность его перехвата при передаче и ксопрометации учетной записи пользователя...

Infosec.20000617.panda.a

Infosec Security Vulnerability Report No: Infosec.20000617.panda.a ============================ Vulnerability Summary --------------------- Problem: Panda Antivirus has an open console at port 2001 Threat: Remotely run any command on a Netware console Platform: Confirmed on Novell Netware Solutio...

Локальный DoS против FreeBSD

Команда dd if=disc image of=/dev/fd0 приводит к перезагрузке системы, если дискета защищена на запись...

Дырка в Secret Disk

На машинах с несколькими мониторами скринсейвер с паролем, запускающийся при изъятии ключа, запускается только на одном мониторе...

Дырка в kcsd под Linux

kcsd использует внешний shell определяемый переменной SHELL, которая задается пользователем. Таким образом, подменив SHELL можно получить привелегии группы disk, позволяющие менять разрешения любых файлов...

KDE 1.11.1.11.22.0 kscd - SHELL Environmental Variable

KDE 1.11.1.11.22.0 kscd - SHELL Environmental Variable source: https://www.securityfocus.com/bid/1206/info Some linux distributions S.u.S.E. 6.4 reported ship with kscd a CD player for the KDE Desktop sgid disk. kscd uses the contents of the 'SHELL' environment variable to execute a browser. This...

CVE-2000-0112

Technical details for CVE-2000-0112 are not publicly available in the provided documents. The description notes an insecure Debian MBR issue, but no confirmable affected products, versions, impact, or mitigations are present here. Monitor for updates.

CVE-2000-0112

The default installation of Debian GNU/Linux uses an insecure Master Boot Record MBR which allows a local user to boot from a floppy disk during the installation...

CVE-1999-0594

A Windows NT system does not restrict access to removable media drives such as a floppy disk drive or CDROM drive...

CVE-2000-0112

The default installation of Debian GNU/Linux uses an insecure Master Boot Record MBR which allows a local user to boot from a floppy disk during the installation...

CVE-2000-0030

Solaris dmispd dmicmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database...

Solaris 7.0 - DMI Denial of Service

source: https://www.securityfocus.com/bid/878/info DMI is the Desktop Management Interface, and is a suite of application management programs shipped with Sun's Solaris. Each application that is managed through DMI has a MIF record which contains information about its managable components and...

cdda2cdr_bof.txt

Greetings, There is a buffer overflow vulnerability in cdda2cdr distributed with at least package cdwtools-0.93-78. This program is sgid disk by default and thus any malicious user who gains disk privs will have r/w access to your entire hard drives in the form of /dev/hd. This is obviously a qui...

CVE-1999-0313

diskbandwidth on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames...

CVE-1999-0466

NetBSD 1.3.3 and earlier are affected by CVE-1999-0466 via the SVR4 /dev/wabi special device file, which allows a local user to read or write arbitrary files on the disk associated with that device due to improper access. Connected documents confirm the same description across Red Hat security ad...

wwwboard-bomb.txt

WWWBoard v2.0 ALPHA Vulnerability Recently, many vulnerabilities have been found in the popular WWWBoard script written by Matt Wright, this is yet another. When the followup value in a form posted to the WWWBoard script contains the same post number twice, the script follows up to that post twic...

sendmail-8.9.1.txt

Date: Thu, 9 Jul 1998 19:31:52 +0200 From: Michal Zalewski Subject: Sendmail up to 8.9.1 - mail.local instroduces new class of bugs Local, setuid mail delivery program included in recent packages - mail.local - introduces new class of local bugs, from DoS attacks to security compromises. For...