Cisco IOS Software TELNET Option Handling Vulnerability

...

MS IIS FrontPage 98 Extensions Buffer Overflow Vulnerability

Advisory ID Internal CORE-041200 1. Advisory Information Date Published: 2000-04-14 Last Update: 2000-04-14 Advisory ID: CORE-041200 Bugtraq ID: 1109 CVE Name: CVE-2000-0260 Title: MS IIS FrontPage 98 Extensions Buffer Overflow Vulnerability Class: Boundary Error Condition Buffer Overflow Remotel...

DVWSSR.dll Vulnerability in Microsoft IIS 4.0 Web Servers

The following is based on information gleaned from a variety of sources. According to the Wall Street Journal, the discoverer is an unnamed employee of ClientLogic. FYI, my comments to Ted Bridis of WSJ yesterday about the issue were made with very little info only the info he was supplied, so fo...

CVE-2000-0298

The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories...

CVE-1999-0193

Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option...

CVE-1999-0193

CVE-1999-0193 affects Ascend and 3Com routers. The vulnerability causes a denial of service by rebooting devices when a zero-length TCP option is sent. The connected documents confirm the DoS impact and list affected hardware as Ascend and 3Com routers, with no explicit patch version or fix detai...

CVE-1999-0840: Undefined Security Weakness

Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option...

CVE-1999-0193: Undefined Security Weakness

Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option...

CVE-1999-0462: Undefined Security Weakness

suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountable file system, e.g. a CD-ROM or floppy disk...

FreeBSD-SA-00:01.make

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:01 Security Advisory FreeBSD, Inc. Topic: Insecure temporary file handling in make1 Category: core Module: make Announced: 2000-01-19 Affects: All versions before the...

DEBIAN-CVE-2000-1220

The line printer daemon lpd in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file...

CVE-2000-0055

Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n option...

CVE-1999-0960

The CVE-1999-0960 entry concerns the IRIX cdplayer component. The vulnerability allows local users to create directories in arbitrary locations via a command line option, indicating potential abuse of filesystem operations by manipulating the cdplayer’s command-line parameters. The available refe...

CVE-1999-0965

CVE-1999-0965 is a race condition in xterm that allows local users to modify arbitrary files via the logging option. The vulnerability is documented across multiple sources (NVD, RH, MSRC, cve.org) as a local-privilege impact tied to xterm’s logging feature. Root cause stated as a race condition;...

CVE-1999-0986

The CVE-1999-0986 entry concerns the Linux ping command (Linux 2.0.3x) where local users can cause a denial of service by sending oversized packets using the -R (record route) option. The available data identifies the affected component as the ping utility and the root cause as improper handling ...

CVE-1999-0685

Buffer overflow in Netscape Communicator via EMBED tags in the pluginspage option...

CVE-1999-0965: Undefined Security Weakness

Race condition in xterm allows local users to modify arbitrary files via the logging option...

CVE-1999-0685: Undefined Security Weakness

Buffer overflow in Netscape Communicator via EMBED tags in the pluginspage option...

CVE-1999-0986: Undefined Security Weakness

The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R record route option...

PT-1999-1699 · Perl · Perl

Name of the Vulnerable Software and Affected Versions: Perl versions 5.004 04 and earlier Description: The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file when Perl is run with the -e option. This is due to Perl following symbolic links...