CVE-2000-0602

CVE-2000-0602 affects Secure Locate (slocate) in Red Hat Linux. Local users can gain privileges through a malformed configuration file referenced by the LOCATE_PATH environment variable, due to improper handling of the config file. The CVSS base score is 4.6 (Medium) with local attack vector and ...

CVE-2000-0604

gkermit in Red Hat Linux is improperly installed with setgid uucp, which allows local users to modify files owned by uucp...

CVE-2000-0508

rpc.lockd in Red Hat Linux 6.1 and 6.2 allows remote attackers to cause a denial of service via a malformed request...

CVE-2000-0602

Secure Locate slocate in Red Hat Linux allows local users to gain privileges via a malformed configuration file that is specified in the LOCATEPATH environmental variable...

CVE-2000-0263

The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request...

CVE-2000-0263

CVE-2000-0263 affects the X font server (xfs) on Red Hat Linux 6.x. A malformed request can cause a denial of service, impacting availability (CVSS v2 base score 2.1). Vector: local, low complexity, no authentication required; impact is limited to availability. No explicit remediation details are...

ISS Security Advisory: Insecure call of external programs in Red Hat Linux tmpwatch

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Advisory October 6, 2000 Insecure call of external programs in Red Hat Linux tmpwatch Synopsis: The tmpwatch utility is used in Red Hat Linux to remove temporary files. This utility has an option to call the "fuser" program,...

[RHSA-2000:066-03] lpr has a format string security bug, LPRng compat issues, and a race cond.

--------------------------------------------------------------------- Red Hat, Inc. Security Advisory Synopsis: lpr has a format string security bug, LPRng compat issues, and a race cond. Advisory ID: RHSA-2000:066-03 Issue date: 2000-09-25 Updated on: 2000-10-04 Product: Red Hat Linux Keywords:...

CVE-2000-1207

userhelper in the usermode package on Red Hat Linux executes non-setuid programs as root, which does not activate the security measures in glibc and allows the programs to be exploited via format string vulnerabilities in glibc via the LANG or LCALL environment variables CVE-2000-0844...

[RHSA-2000:062-03] glint symlink vulnerability

--------------------------------------------------------------------- Red Hat, Inc. Security Advisory Synopsis: glint symlink vulnerability Advisory ID: RHSA-2000:062-03 Issue date: 2000-09-19 Updated on: 2000-09-19 Product: Red Hat Linux Keywords: glint symlink rpm Cross references: N/A...

CVE-2000-0715

DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2000-0714

umb-scheme 3.2-11 for Red Hat Linux is installed with world-writeable files...

CVE-2000-0714

The CVE-2000-0714 issue concerns umb-scheme 3.2-11 for Red Hat Linux, which is installed with world-writable files. This local-access vulnerability arises from permissions allowing modification of files by any user, potentially compromising integrity and confidentiality of affected components. Th...

CVE-2000-0715

Summary (CVE-2000-0715) : The vulnerability affects Red Hat Linux 6.2’s DiskCheck script (diskcheck.pl), a Powertools utility that alerts on near-capacity disks. Diskcheck.pl creates a temporary file in /tmp with a predictable name and runs with elevated privileges (setuid root). An attacker can ...

RedHat Linux 6.1 i386 - Tmpwatch Recursive Write Denial of Service

RedHat Linux 6.1 i386 - Tmpwatch Recursive Write Denial of Service source: https://www.securityfocus.com/bid/1664/info Any user with write access to /tmp or /var/tmp, can induce tmpwatch to cause Red Hat and others runnng tmpwatch from cron to stop responding, and possibly require a hard reboot...

RedHat Linux 6.1 i386 - Tmpwatch Recursive Write Denial of Service

source: https://www.securityfocus.com/bid/1664/info Any user with write access to /tmp or /var/tmp, can induce tmpwatch to cause Red Hat and others runnng tmpwatch from cron to stop responding, and possibly require a hard reboot. This is accomplished by creating a directory tree many ie. 6000 nod...

FlagShip v4.48.7449 premission vulnerability

Content-Type: premission/vulnerability Date : 09/08/2000 16:05 Sender : Narrow [email protected] Subject : FlagShip v4.48.7449 premission vulnerability X-System : Red Hat 6.0 X-Status : Narrow-ADV-08 DESCRIPTION FlagShip is a cross-platform database development system, fully compatible to Clipper,...

VariCAD 7.0 premission vulnerability

Content-Type: premission/vulnerability Date : 10/08/2000 18:34 Sender : Narrow [email protected] Subject : VariCAD 7.0 premission vulnerability X-System : Red Hat 6.0 X-Status : Narrow-ADV-07 DESCRIPTION VariCAD is a CAD for mechanical engineering for both 2D and 3D. VariCAD 7.0 is shipped with Re...

CVE-2000-0618

Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via long DISPLAY environmental variable...

CVE-2000-0618

CVE-2000-0618 affects xconq and cconq game programs on Red Hat Linux. A buffer overflow is triggered by a long DISPLAY environment variable, enabling local users to gain additional privileges. The entry lists a CVSS v2 base score of 4.6 (Medium) with local access, low attack complexity, and no au...