3249 matches found
CVE-2000-0934
Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack...
CVE-2000-1125
CVE-2000-1125 affects Red Hat Linux 6.2 where the restore utility trusts the pathname in the RSH environment variable. A local attacker can set RSH to a Trojan horse program, potentially gaining root privileges. The vulnerability arises from unvalidated use of RSH in invoking external programs (r...
CVE-2000-1125
restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program...
CVE-2000-0956
cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow the users to bypass specified access restrictions...
CVE-2000-1009
dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program...
CVE-2000-1009
dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program...
CVE-2000-1009
CVE-2000-1009 concerns Red Hat Linux 6.2 where the backup tool dump relies on the RSH environment variable to decide which program to run remotely. The pathname specified by RSH is trusted, enabling local users to substitute a Trojan horse program and gain root privileges. The root cause is impro...
[RHSA-2000:114-03] ghostscript uses mktemp instead of mkstemp, and uses an improper LD_RUN_PATH
--------------------------------------------------------------------- Red Hat, Inc. Security Advisory Synopsis: ghostscript uses mktemp instead of mkstemp, and uses an improper LDRUNPATH Advisory ID: RHSA-2000:114-03 Issue date: 2000-11-22 Updated on: 2000-11-22 Product: Red Hat Linux Keywords:...
CVE-2000-0829
The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a denial of service by creating deeply nested directories in /tmp or /var/tmp/...
[RHSA-2000:024-02] Updated nss_ldap packages are now available.
--------------------------------------------------------------------- Red Hat, Inc. Security Advisory Synopsis: Updated nssldap packages are now available. Advisory ID: RHSA-2000:024-02 Issue date: 2000-10-27 Updated on: 2000-10-27 Product: Red Hat Linux Keywords: N/A Cross references: N/A...
[RHSA-2000:094-01] Updated cyrus-sasl packages available for Red Hat Linux 7
--------------------------------------------------------------------- Red Hat, Inc. Security Advisory Synopsis: Updated cyrus-sasl packages available for Red Hat Linux 7 Advisory ID: RHSA-2000:094-01 Issue date: 2000-10-26 Updated on: 2000-10-26 Product: Red Hat Linux Keywords: cyrus-sasl...
Security Advisory - ntop local buffer overflow vulnerability (fwd)
Subject : ntop local buffer overflow vulnerability Author : Christophe BAILLEUX [email protected] Plateforms : nix Test version : ntop 1.1, ntop 1.2.a7, ntop 1.3.1, ntop 1.3.2 I. Problem All ntop versions are vulnerabled to local buffer overflow attack in there -i options. Ntop must be owned by root...
CVE-2000-0031
The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack...
CVE-2000-0715
DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a temporary file...
CVE-2000-0714
umb-scheme 3.2-11 for Red Hat Linux is installed with world-writeable files...
[RHSA-2000:087-02] Potential security problems in ping fixed.
--------------------------------------------------------------------- Red Hat, Inc. Security Advisory Synopsis: Potential security problems in ping fixed. Advisory ID: RHSA-2000:087-02 Issue date: 2000-10-17 Updated on: 2000-10-18 Product: Red Hat Linux Keywords: ping buffer overflows Cross...
CVE-2000-1213
ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, does not drop privileges after acquiring a raw socket, which increases ping's exposure to bugs that otherwise would occur at lower privileges...
CVE-2000-1214
Buffer overflows in the 1 outpack or 2 buf variables of ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, may allow local users to gain privileges...
CVE-2000-0263
CVE-2000-0263 affects the X font server (xfs) on Red Hat Linux 6.x. A malformed request can cause a denial of service, impacting availability (CVSS v2 base score 2.1). Vector: local, low complexity, no authentication required; impact is limited to availability. No explicit remediation details are...