2797 matches found
ml2 - Local users can Crash processes
include include include include error int mainint argc, char argv char foo1000; char bigmsg10000; char s, holds; int i = 0; memsetbigmsg, 'X', sizeofbigmsg-1; if argc \n", argv0; exit1; // fork; memsetfoo, 0, sizeoffoo; snprintffoo, sizeoffoo, "/proc/%s/stat", argv1; while accessfoo, FOK == 0 s =...
ManTrap 1.6.1 - Hidden Process Disclosure
ManTrap 1.6.1 - Hidden Process Disclosure // source: https://www.securityfocus.com/bid/1908/info ManTrap is a "honeypot" intrusion detection system designed to lure attackers into it for analysis. The honeypot is implemented as a chroot'ed Solaris environment, designed to look and feel real to an...
CVE-2000-0880
LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processes by specifying an alternate process ID and using the setuid dcclpdshut program to kill the process that was specified in the lpdprocess file...
CVE-2000-0251
HP-UX 11.04 VirtualVault VVOS sends data to unprivileged processes via an interface that has multiple aliased IP addresses...
CVE-2000-0251
HP-UX 11.04 VirtualVault (VVOS) is affected by CVE-2000-0251. The issue involves VVOS sending data to unprivileged processes via an interface that has multiple aliased IP addresses. This exposes sensitive data to unprivileged processes, with the documented impact indicating partial integrity comp...
CVE-1999-0780: Undefined Security Weakness
KDE klock allows local users to kill arbitrary processes by specifying an arbitrary PID in the .kss.pid file...
CVE-1999-0226
Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service...
CVE-1999-0226: Undefined Security Weakness
Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service...
CVE-1999-0992
HP VirtualVault with the PHSS17692 patch allows unprivileged processes to bypass access restrictions via the Trusted Gateway Proxy TGP...
SCO Unixware 7.07.0.17.17.1.1 - coredump Symlink
SCO Unixware 7.07.0.17.17.1.1 - coredump Symlink source: https://www.securityfocus.com/bid/851/info Under certain versions of SCO UnixWare if a user can force a program with SGID Set Group ID to dump core they may launch a symlink attack by guessing the PID Process ID of the SGID process which th...
ipop3d.4.xx.lockfile.DoS.txt
Date: Sun, 7 Mar 1999 01:41:25 +0100 From: Michal Zalewski Lockfile vunerability in ipop3d 4.xx The problem is probably well known, but silently ignored by pine vendors. Unfortunately, it's possible to turn 'mostly harmless feature' in something nasty - following code allows various DoSes by...
CVE-1999-0226
Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service...
CVE-1999-0780
KDE klock allows local users to kill arbitrary processes by specifying an arbitrary PID in the .kss.pid file...
FreeBSD-SA-96:01.sliplogin
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-96:01 Security Advisory Revised: Wed May 22 00:18:51 PDT 1996 FreeBSD, Inc. Topic: sliplogin unauthorized access vulnerability Category: core Module: sliplogin Announced:...
