CVE-1999-0976

Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting Sendmail...

[SECURITY] New version of sendmail released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman December 7, 1999 - ------------------------------------------------------------------------ The version of sendmail that was...

CVE-1999-0852

IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin...

CVE-1999-1475

ProFTPd 1.2 compiled with the modsqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privileges by reading wtmp, e.g. via the last command...

SunOS 4.1.1 - usrreleasebinwinstall Local Privilege Escalation

SunOS 4.1.1 - usrreleasebinwinstall Local Privilege Escalation source: https://www.securityfocus.com/bid/22/info This applies to sites that have installed Sun Source tapes only. The Sun distribution of sources sunsrc has an installation procedure which creates the directory /usr/release/bin and...

AZL-37065 CVE-1999-0901 affecting package ypserv 4.2-12

ypserv allows a local user to modify the GECOS and login shells of other users...

AZL-7455 CVE-1999-0901 affecting package ypserv 4.1-4

ypserv allows a local user to modify the GECOS and login shells of other users...

CVE-1999-1347

Xsession in Red Hat Linux 6.1 and earlier can allow local users with restricted accounts to bypass execution of the .xsession file by starting kde, gnome or anotherlevel from kdm...

CVE-1999-1346

PAM configuration file for rlogin in Red Hat Linux 6.1 and earlier includes a less restrictive rule before a more restrictive one, which allows users to access the host via rlogin even if rlogin has been explicitly disabled using the /etc/nologin file...

CVE-1999-1345

AutoFTP.pl script in AutoFTP 0.2 uses the /tmp/ftptmp as a shared directory with insecure permissions, which allows local users to 1 send arbitrary files to the remote server by placing them in the directory, and 2 view files that are being transferred...

CVE-1999-0310

HP-UX SSH 1.2.25 is vulnerable (CVE-1999-0310): it allows access to new user accounts. This is confirmed across NVD/Red Hat/PT-Security records. The exact root cause isn’t spelled out in the available documents, but the impact aligns with elevated access risk (networked). Remediation: update to a...

CVE-1999-0334

CVE-1999-0334 affects Solaris 2.2–2.3. When fsck fails at startup, a local user with physical access can obtain root privileges (root access). Root cause: startup fsck issue allowing escalation on physical access. Impact: local privilege escalation with full system compromise potential if attacke...

CVE-1999-0087

CVE-1999-0087 describes a denial-of-service issue affecting the AIX telnet service, where the system can be frozen and become inaccessible to users. The connected documents consistently identify the vulnerability as impacting AIX Telnet and note the outcome as a potential system stall, but they d...

CVE-1999-0367

NetBSD netstat command allows local users to access kernel memory...

CVE-1999-0087

Denial of service in AIX telnet can freeze a system and prevent users from accessing the server...

CVE-1999-0132

Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root access...

CVE-1999-0135

admintool in Solaris allows a local user to write to arbitrary files and gain root access...

CVE-1999-0334

In Solaris 2.2 and 2.3, when fsck fails on startup, it allows a local user with physical access to obtain root access...

CVE-1999-0342

Linux PAM modules allow local users to gain root access using temporary files...

CVE-1999-0108

The connected documents corroborate CVE-1999-0108: a local buffer overflow in the IRIX printers program can grant root access to local users. The vulnerability arises in the printers utility on IRIX; details beyond the existence of a buffer overflow and local privilege escalation are not provided...