CVE-1999-0603

CVE-1999-0603 pertains to Windows NT where an inappropriate user is a member of privileged groups (e.g., Administrator, Domain Admins, Backup Operators, etc.). The root cause is improper assignment of users to high-privilege groups, enabling potential escalation of privileges. Documented groups i...

CVE-1999-0238

CVE-1999-0238 affects the PHP/FI php.cgi CGI that allows an attacker to read arbitrary files on the system. The Red Hat, EUVD, and NVD entries consistently describe php.cgi as vulnerable to local file disclosure via traversal of the CGI, with the core issue being a path/file read capability in th...

CVE-1999-0492

The CVE-1999-0492 entry relates to ffingerd version 1.19, where remote attackers can identify users on the target system based on its responses. The connected PT-1999-1171 page confirms the affected software and reiterates the issue, stating that there is no information about a fix in version 1.1...

CVE-1999-0990

The connected PT-1999-1510 entry identifies the vulnerability as affecting gdm (GNOME Display Manager) through error messages emitted when VerboseAuth is enabled. The root cause is verbose authentication error messages that allow an attacker to identify valid users on a system from local access. ...

CVE-1999-0127

swinstall and swmodify commands in SD-UX package in HP-UX systems allow local users to create or overwrite arbitrary files to gain root access...

CVE-1999-0590

Technical details are not publicly available in the provided documents for CVE-1999-0590; no affected products, versions, impact, or remediation are specified. Monitor for updates from the connected sources.

CVE-1999-1300

Vulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users to read arbitrary files and modify system accounting configuration...

csm.dos.txt

Local / Remote D.o.S Attack in CSM Mail Server for Windows 95/NT v.2000.08.A USSR Advisory Code: USSR-99027 Release Date: December 29, 1999 3/5 Systems Affected: CSM Mail Server for Windows 95/NT and others old versions. Version: 2000-01A Version: 1999-07M Version: 1999-07I Version: 1999-07H...

ie5.file.txt

Microsoft Internet Explorer 4/5 overflows when the handling of "file://" specification. This overflow occurs when we are logging on to the Microsft Network, this overflow can be verified if the long name is specfied to the "file://". For example, file://test/AAAAAAAAAAAA.... long 'A' This is most...

oss-sound-tmp.txt

Date: Thu, 17 Dec 1998 02:12:38 +0200 From: Stefan Laudat Reply-To: Bugtraq List To: [email protected] Subject: OSS nice tmp race Hello all, While digging in the "soundon" script delivered with the OSS package the commercial one, of course, I have discovered something very unusual on line 26...

Wingate_Registry_sploit.txt

Problem: All of the wingate server settings are stored in "HKEYLOCALMACHINE\Sofware\Qbik Software\Wingate" This makes it possible for anyone with registry editing permissions remote or physical to change wingate settings. Details: With about 10 minutes of exploration of the wingate settings i was...

nt-tcpip-dos.txt

Date: Fri, 25 Sep 1998 18:19:50 +0200 From: Gigi Mori Subject: Crashing NT with Native Calls Hi, Playing with TCPIP.SYS I've noticed that any user could crash the local system with a IRQLNOTLESSOREQUAL exception just calling the undocumented function NtDeviceIoControlFile with an handle to TCPIP...

WinWebserver-exploit.txt

http://www.sddt.com/files/library/98/06/25/tbc.html Source Programmers Discover Internet Server Bug Daily Transcript Business Report June 25, 1998 Programmers at San Diego Source, the online news service of the San Diego Daily Transcript, have discovered a security hole affecting Web server...

xfree86.suse.txt

Date: Sun, 28 Mar 1999 23:20:58 +0200 From: Marc Heuse To: [email protected] Subject: SuSE Security Announcement - XFree86 -----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: xf86-3.3.3-5 Date: Sun Mar 28 12:26:39 CEST 1999 Affected: unix operating systems using xfree86 A...

sendmail.8.9.1-2.txt

Date: Thu, 24 Sep 1998 10:14:06 -0400 From: Simon Smith This is not the same attack as the last one regarding the "". This one does not make your system hang but rather alters permissions is seems. If this was already posted please disregard it...

TCP/IP IP Fragmentation Remote DoS (bonk)

It was possible to make the remote server crash using the 'bonk' attack. This is due to a design flaw in the remote operating system's TCP/IP implementation. An attacker may use this flaw to shut down this server, thus preventing the network from working properly. C Tenable Network Security, Inc...

CVE-1999-0416

Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the router's TELNET port...

CVE-1999-0197

finger 0@host on some systems may print information on some user accounts...

CVE-1999-0530

A system is operating in "promiscuous" mode which allows it to perform packet sniffing...

FreeBSD-SA-96:02.apache

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-96:02 Security Advisory FreeBSD, Inc. Topic: apache httpd meta-character escaping Category: port Module: apache Announced: 1996-04-22 Affects: FreeBSD 2.0.5 and 2.1.0...