CVE-2000-0606

Buffer overflow in kon program in Kanji on Console KON package on Linux may allow local users to gain root privileges via a long -StartupMessage parameter...

CVE-2000-0578

SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file names, which could allow local users to insert malicious contents into these files as they are being compiled by another user...

CVE-2000-0604

gkermit in Red Hat Linux is improperly installed with setgid uucp, which allows local users to modify files owned by uucp...

X 11.03.3.33.3.43.3.53.3.64.0 - libX11 _XAsyncReply() Stack Corruption

X 11.03.3.33.3.43.3.53.3.64.0 - libX11 XAsyncReply Stack Corruption // source: https://www.securityfocus.com/bid/1408/info A vulnerability exists in the XAsyncReply function of libX11. This function utilizes size information retrieved as part of a client supplied packet. This value is a signed...

X 11.0/3.3.3/3.3.4/3.3.5/3.3.6/4.0 - libX11 '_XAsyncReply()' Stack Corruption

// source: https://www.securityfocus.com/bid/1408/info A vulnerability exists in the XAsyncReply function of libX11. This function utilizes size information retrieved as part of a client supplied packet. This value is a signed integer. By forcing this value to be negative, it becomes possible to...

CVE-2000-0475

Windows 2000 allows a local user process to access another user's desktop within the same windows station, aka the "Desktop Separation" vulnerability...

CGI: Selena Sol's WebBanner ( Random Banner Generator ) Vulnerability

Application Name: WebBanner Random Banner Generator Application Authors: Eric Tachibana Selena Sol and Gunther Birznieks Version: 4.0 Last Modified: 17NOV98 Site: http://www.extropia.com Origin: Script design fault Consequence: User can view files as user the server are running Solution: See at t...

CVE-2000-0534

The apsfilter software in the FreeBSD ports package does not properly read user filter configurations, which allows local users to execute commands as the lpd user...

HP-UX 10.20/11.0 - '.SNMPD' File Permission

source: https://www.securityfocus.com/bid/1327/info A vulnerability exists in the snmpd included with HPUX 11, from Hewlett Packard. The configuration file for the snmpd is world writable. This could allow any user on the system to view and/or alter the settings of the snmp daemon. This in turn...

CVE-2000-0516

When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN Distinguished Name name and password in cleartext in a file that is world readable, which allows local users to compromise the LDAP server...

CVE-1999-0118

AIX infod allows local users to gain root access through an X display...

CVE-1999-0590

A system does not present an appropriate legal message or warning to a user who is accessing it...

PT-2000-1016 · Linux +2 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The system fails to display an appropriate legal message or warning to users when they access it. Recommendations: At the moment, there is no information about a newer version that...

Security Advisory 2000-006

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2000-006 ================================= Topic: /etc/ftpchroot parsing broken in NetBSD-1.4.2 Version: NetBSD 1.4.2 only Severity: medium to high if using /etc/ftpchroot, none if not. Abstract ======== A fix which attempted to make...

Qpopper EUIDL Arbitrary Command Execution

The remote version of the Qpopper POP server contains a bug that could allow authenticated users who have a pop account to gain a shell with the gid 'mail' by sending to themselves a specially crafted mail. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10423;...

Local DoS : RedHat 6.0

Hello, I'm not sure if this problem has ever been addressed or not, but considering that I just spent a day recovering from a corrupted root partition and this can be done by any user with window manager access, I thought this might be worth mentioning anyway. While killing yet another zombie...

Pacific Software Carello 1.2.1 - File Duplication Source Disclosure

Pacific Software Carello 1.2.1 - File Duplication Source Disclosure source: https://www.securityfocus.com/bid/1245/info A remote user can gain read and write access on a target machine running Carello shopping cart software. First, a user may create a duplicate of a known file in a known director...

BUFFER OVERRUN VULNERABILITIES IN KERBEROS

-----BEGIN PGP SIGNED MESSAGE----- BUFFER OVERRUN VULNERABILITIES IN KERBEROS SUMMARY: Serious buffer overrun vulnerabilities exist in many implementations of Kerberos 4, including implementations included for backwards compatibility in Kerberos 5 implementations. Other less serious buffer overru...

rm.racecondition

Synopsis: If root ever does "rm -rf /tmp/foo" for a directory structure not completely owned by root, a local user can delete all files that root can. Such deletions are common for a /tmp cleanup and b before creating a specific directory in /tmp/. Details: "rm -r" implementations Solaris 7, Gnu...

sses-sshauth.txt

Sword & Shield Enterprise Security, Inc. - Security Advisory www.sses.net, Copyright c 2000 Advisory: Secure Shell Authentication Vulnerability Release Date: May 10, 2000 Application: sshd Severity: High - A user local or remote can log into any account with a valid login shell. Status: Affected...