1233 matches found
Caldera OpenLinux 2.2 Debian 2.12.2 RedHat 6.0 - Vixie Cron MAILTO Sendmail
Caldera OpenLinux 2.2 Debian 2.12.2 RedHat 6.0 - Vixie Cron MAILTO Sendmail Caldera OpenLinux 2.2 ,Debian Linux 2.1/2.2,RedHat Linux = 6.0 Vixie Cron MAILTO Sendmail Vulnerability source: https://www.securityfocus.com/bid/611/info Failure by the vixie cron daemon from validating the contents of a...
RedHat Linux 6.0 / Slackware Linux 4.0 - Termcap 'tgetent()' Local Buffer Overflow (2)
// source: https://www.securityfocus.com/bid/588/info A buffer overflow existed in libtermcap's tgetent function, which could cause the user to execute arbitrary code if they were able to supply their own termcap file. Versions of libtermcap 2.0.8 and earliear are vulnerable. Under Red Hat Linux...
procmail.screen.txt
Date: Mon, 5 Apr 1999 19:40:37 +0100 From: Chris Evans To: [email protected] Subject: More procmail Hi, Well well since Debian appear to have "broken silence" on the procmail front rather than wait for an official announcement... I found something potentially more serious than boring heap...
redhat.6.0.dev.cdrom.perms.txt
Date: Thu, 3 Jun 1999 18:46:05 +0200 From: Salvatore Sanfilippo -antirez- To: [email protected] Subject: Re: RedHat 6.0 cdrom permissions was RedHat 6.0, /dev/pts permissions bug when using xterm On Sun, Jun 06, 1999 at 07:15:05PM +0000, noc-wage wrote: Many of you RedHat 6.0 users who install...
ClearCase.txt
L0pht Security Advisory Advisory released Jan 8 1999 Application: Rational Software's Clear Case v3.2 Severity: any local user can become root Author: [email protected] http://www.L0pht.com/advisories.html --- Overview : --- ClearCase is a configuration management program from Rational Software...
Oracle 8 8.1.5 - Intelligent Agent (2)
Oracle 8 8.1.5 - Intelligent Agent 2 // source: https://www.securityfocus.com/bid/585/info A vulnerability in the Oracle Intelligent Agent allows local malicious users to execute arbitrary commands and to create world writable files as the root user. The problem lies in the dbsnmp program located...
IBM AIX 4.3.1 - 'adb' Denial of Service
source: https://www.securityfocus.com/bid/520/info adb is the debugger that ships with IBM's AIX operating system. It is possible for a local user to cause a local denial of service through exploiting the version of adb shipped with AIX 4.2 through 4.3.1. The consequence of adb being exploited is...
Debian 2.1 - Print Queue Control
Debian 2.1 - Print Queue Control // source: https://www.securityfocus.com/bid/508/info The LPRng software is an enhanced, extended, and portable version of the Berkeley LPR software the standard UNIX printer spooler that ships with Debian GNU/Linux. When root controls the print queue, the...
Debian 2.1 - Print Queue Control
// source: https://www.securityfocus.com/bid/508/info The LPRng software is an enhanced, extended, and portable version of the Berkeley LPR software the standard UNIX printer spooler that ships with Debian GNU/Linux. When root controls the print queue, the authentication that is used is based on...
SCO Open Server 5.0.5 - XBase Buffer Overflow
SCO Open Server 5.0.5 - XBase Buffer Overflow // source: https://www.securityfocus.com/bid/479/info The XBase package that ships with SCO OpenServer 5.0. is vulnerable to several buffer overflow attacks in many different XBase tools. The tools that are installed setuid root allow local users to...
G. Wilford man 2.3.10 - Symlink
source: https://www.securityfocus.com/bid/305/info The man command created a temporary file under /tmp with a predictable name and is willing to follow symbolic links. This may allow malicious local users to create arbitrarily named files. zsoelim1 is a utility part of the man package which...
IBM AIX 4.2.1 Sun Solaris 7.0 - LC_MESSAGES libc Buffer Overflow (1)
IBM AIX 4.2.1 Sun Solaris 7.0 - LCMESSAGES libc Buffer Overflow 1 source: https://www.securityfocus.com/bid/268/info A buffer overflow in libc's handling of the LCMESSAGES environment variable allows a malicious user to exploit any suid root program linked agains libc to obtain root privileges...
IBM AIX 4.2.1 / Sun Solaris 7.0 - LC_MESSAGES libc Buffer Overflow (2)
// source: https://www.securityfocus.com/bid/268/info A buffer overflow in libc's handling of the LCMESSAGES environment variable allows a malicious user to exploit any suid root program linked agains libc to obtain root privileges. This problem is found in both IBM's AIX and Sun Microsystem's...
IBM Remote Control Software 1.0 - Code Execution
IBM Remote Control Software 1.0 - Code Execution source: https://www.securityfocus.com/bid/284/info The IBM Remote Control Software package requires a client module to be loaded on NT hosts to be remotey controlled. This client module is loaded as an NT service and must run under either the local...
IBM Remote Control Software 1.0 - Code Execution
source: https://www.securityfocus.com/bid/284/info The IBM Remote Control Software package requires a client module to be loaded on NT hosts to be remotey controlled. This client module is loaded as an NT service and must run under either the local system account or the user context of a user...
CVE-1999-0424
talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes...
Linux Kernel 2.2 - 'ldd core' Force Reboot (Denial of Service)
source: https://www.securityfocus.com/bid/344/info Due to a rare and subtle bug in the 2.2.0 kernel, a linux machine can be forced to reboot by an unpriviliged local user. The reason for this is because of the invalid ELF core layout and the fact that munmap wipes out a vital page table entry. On...
CVE-1999-0451
Denial of service in Linux 2.0.36 allows local users to prevent any server from listening on any non-privileged port...