Potential security problem with mtr

Hi. One of my users asked me to install mtr, most adequately described as a GUI:ed combination of traceroute and ping. I thought it looked cool, and had a closer look. In this mail follows a warning about a potential security problem with this program if installed as suggested. No exploit has bee...

chase.online.banking.txt

Date: Thu, 06 May 1999 12:40:08 GMT From: [email protected] Daniel Norton Subject: Security/privacy hole in Chase Online Banking Here's an excerpt from a letter I faxed to Chase Online Banking www.chase.com the other day. Not only have they not fixed the problem, they apparently didn't...

linuxconf.txt

Date: Sat, 22 Aug 1998 20:35:42 -0500 From: Alex Mottram Subject: Security concerns in linuxconf shipped w/RedHat 5.1 There exists a security / DOS problem with linuxconf-1.11.r11-rh3/i386 as upgraded from RedHat's FTP site. No other versions have been tested by me. Both the maintainer of linuxco...

fwtk.gauntlet.random.seed.txt

Date: Fri, 16 Apr 1999 15:36:27 -0500 From: [email protected] To: [email protected] Subject: FWTK, Gauntlet 'random seed' security problem Summary A 'random seed' problem in lib/rand.c affects all local challenge-response authentication on FWTK and Gauntlet. Many services have support available...

outlook.express.zone.txt

Date: Mon, 26 Apr 1999 05:07:19 -0700 From: "1nternal @geocities.com" To: [email protected] Subject: Minor privacy exploit in Outlook Express Outlook Express uses HTML to display ceratin information in the 'outlook today' type part of outlook express, ie, the number of unread messages in your...

CVE-2021-35684

CVE-2021-35684 is a duplicate of CVE-2022-21306. The connected CVE-2022-21306 describes a vulnerability in Oracle WebLogic Server (Fusion Middleware Core) affecting 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. It allows unauthenticated remote exploitation via standard ports (T3), potentiall...

CVE-2022-46283

This CVE-2022-46283 entry is rejected/not used as stated in the Description.

CVE-2006-2192

This CVE ID has been rejected by its CVE Numbering Authority and is not an active vulnerability entry.

CVE-2024-21679

CVE-2024-21679 (Confluence DoS) affects Atlassian Confluence Data Center and Server . Affected ranges include: 5.6–7.19.13, 8.0–8.5.0. The issue allows an unauthenticated attacker to cause a resource to become unavailable by disrupting services of a vulnerable host, with high availability impact ...

CVE-2022-20128

CVE-2022-20128 is rejected/withdrawn by its CNA and does not represent an active vulnerability entry.

CVE-2005-2347

This CVE-2005-2347 entry is rejected/not used and does not represent an active vulnerability.

CVE-2021-21158

CVE-2021-21158 entry is rejected/not used.

CVE-2020-2521

CVE-2020-2521 entry is rejected/not used; does not represent an active vulnerability.

CVE-2018-1472

CVE-2018-1472 entry is rejected/not used per initial description.

CVE-2024-1271

CVE-2024-1271 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2021-30369

CVE-2021-30369 entry is rejected/not used per initial description.

CVE-2021-0447

Removed by vendor...

CVE-2019-3309

Removed by vendor...