CVE-2000-0455

CVE-2000-0455: A buffer overflow in the xlockmore xlock program (versions 4.16 and earlier) allows local users to read sensitive data from memory via a long -mode option. Affected component is xlockmore; root cause is a memory safety overrun in handling the -mode argument. Impact documented as pa...

CVE-2000-0407: Undefined Security Weakness

Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option...

CVE-2000-0316: Undefined Security Weakness

Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option...

OpenSSH < 2.1.1 UseLogin Local Privilege Escalation

According to its banner, the remote host appears to be running OpenSSH version older than 2.1.1. Such versions are reportedly affected by a local privilege esclation vulnerability. If the UseLogin option is enabled, then sshd does not switch to the uid of the user logging in. Instead, sshd relies...

INN < 2.2.3 verifycancels Option Cancel Request Message Overflow

The remote version of INN is between 2.0 and 2.2.2 There is a known security flaw in this version of INN which may allow an attacker to execute arbitrary code on this server is the option 'verifycancels' is enabled in inn.conf C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

[COVERT-2000-06] Initialized Data Overflow in Xlock

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Network Associates, Inc. COVERT Labs Security Advisory May 29, 2000 Initialized Data Overflow in Xlock COVERT-2000-06 o Synopsis An implementation vulnerability in xlock allows global variables in the initialized data section of memory to be...

CVE-2000-0343: Undefined Security Weakness

Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FROM mail header...

FreeBSD 3.4/4.0/5.0 / NetBSD 1.4 - Unaligned IP Option Denial of Service

// source: https://www.securityfocus.com/bid/1173/info A vulnerability exists in the 1.4.x NetBSD kernel that may allow remote attackers to cause the machine to kernel panic on certain architectures. By sending a packet to a machine running the Alpha or SPARC versions of NetBSD, with an unaligned...

Solaris 2.6/7.0 - 'lpset -r' Local Buffer Overflow (3)

/ source: https://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. However, when supplied a well crafted buffer containing...

Solaris 2.6/7.0 - 'lpset -r' Local Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. However, when supplied a well crafted buffer containing...

Security Advisory: Cisco IOS Software TELNET Option Handling Vulnerability

Cisco IOS Software TELNET Option Handling Vulnerability Revision 1.0 For public release Thursday 2000/04/20 at 09:00 AM US/Eastern UTC-0400. --------------------------------------------------------------------------- Summary ======= A defect in multiple Cisco IOS software versions will cause a...

Cisco IOS Software TELNET Option Handling Vulnerability

...

DVWSSR.dll Vulnerability in Microsoft IIS 4.0 Web Servers

The following is based on information gleaned from a variety of sources. According to the Wall Street Journal, the discoverer is an unnamed employee of ClientLogic. FYI, my comments to Ted Bridis of WSJ yesterday about the issue were made with very little info only the info he was supplied, so fo...

MS IIS FrontPage 98 Extensions Buffer Overflow Vulnerability

Advisory ID Internal CORE-041200 1. Advisory Information Date Published: 2000-04-14 Last Update: 2000-04-14 Advisory ID: CORE-041200 Bugtraq ID: 1109 CVE Name: CVE-2000-0260 Title: MS IIS FrontPage 98 Extensions Buffer Overflow Vulnerability Class: Boundary Error Condition Buffer Overflow Remotel...

CVE-2000-0298

The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories...

CVE-1999-0193

CVE-1999-0193 affects Ascend and 3Com routers. The vulnerability causes a denial of service by rebooting devices when a zero-length TCP option is sent. The connected documents confirm the DoS impact and list affected hardware as Ascend and 3Com routers, with no explicit patch version or fix detai...

CVE-1999-0193

Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option...

CVE-1999-0840: Undefined Security Weakness

Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option...

CVE-1999-0193: Undefined Security Weakness

Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option...

CVE-1999-0462: Undefined Security Weakness

suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountable file system, e.g. a CD-ROM or floppy disk...