Security Bulletin (MS00-053)

Microsoft Security Bulletin MS00-053 - -------------------------------------- Patch Available for "Service Control Manager Named Pipe Impersonation" Vulnerability Originally posted: August 02, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsof...

Microsoft Windows SMB LanMan Pipe Server Listing Disclosure

It was possible to obtain the browse list of the remote Windows system by sending a request to the LANMAN pipe. The browse list is the list of the nearest Windows systems of the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10397; scriptversion"1.42";...

CVE-1999-0163

CVE-1999-0163 affects older Sendmail versions. An attacker could use a pipe character to execute root commands, enabling local privilege escalation. Affected data shows multiple advisories citing Sendmail with this pipe-based command execution, including references to specific package versions (e...

CVE-1999-0885: Undefined Security Weakness

Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL...

CVE-1999-0163: Undefined Security Weakness

In older versions of Sendmail, an attacker could use a pipe character to execute root commands...

rxvt.sh

There is a major security hole in rxvt, a terminal emulator for X, when it is run on systems suid root, as is required on many configurations in order to write to the utmp file. It is obvious from the code that this program was not written to be run suid root, its a pity that sysadmins that insta...

AZL-7358 CVE-1999-0163 affecting package sendmail 8.15.2-46

In older versions of Sendmail, an attacker could use a pipe character to execute root commands...

PT-1997-1070 · Sendmail · Sendmail

Name of the Vulnerable Software and Affected Versions: Sendmail versions prior to the fixed version Description: The issue allows an attacker to execute root commands using a pipe character. Recommendations: For versions prior to the fixed version, update to the fixed version to resolve the issue...

GlimpseHTTP 1.0/2.0 / WebGlimpse 1.0 - Piped Command

source: https://www.securityfocus.com/bid/2026/info WebGlimpse and GlimpseHTTP are web indexing and search engine programs with some associated management scripts. GlimpseHTTP up to and including 2.0, and WebGlimpse prior to version 1.5, suffer from a common vulnerability involving the component...