CVE-2000-0791

Trustix installs the httpsd program for Apache-SSL with world-writeable permissions, which allows local users to replace it with a Trojan horse...

MS Word and MS Access vulnerability - executing arbitrary programs, may be exploited by IE/Outlook

Georgi Guninski security advisory 17, 2000 MS Word and MS Access vulnerability - executing arbitrary programs, may be exploited by IE/Outlook Systems affected: MS Word and MS Access 2000 with or without Service Release 1a IE and Outlook may be also used, but are not needed / Windows 98 - almost...

IE Domain Confusion Vulnerability

IE can be fooled into thinking a web page is in any domain by encoding some characters in the URL and placing the domain you want to spoof at the end of the URL. For example the URL http://www.peacefire.org2fsecurity2fiecookies2fshowcookie.html3F.amazon.com is in the pecefire.org domain but becau...

CVE-1999-1235

Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow 1 local users to read the information from another user's index.dat, or 2 people who are physically observing "shoulder surfing" another user to read the information from the status bar...

ms.outlook.spoof.txt

Date: Tue, 20 Apr 1999 15:10:05 -0700 From: Nate Lawson To: [email protected] Subject: Outlook 98 allows spoofing internal users Problem: Outlook uses a sender's Reply-To address silently, allowing a user to inadvertently send data to an Internet mail account when intending to reply to an...

linuxconf.txt

Date: Sat, 22 Aug 1998 20:35:42 -0500 From: Alex Mottram Subject: Security concerns in linuxconf shipped w/RedHat 5.1 There exists a security / DOS problem with linuxconf-1.11.r11-rh3/i386 as upgraded from RedHat's FTP site. No other versions have been tested by me. Both the maintainer of linuxco...

CVE-1999-0694

Denial of service in AIX ptrace system call allows local users to crash the system...

CVE-1999-1270

KMail in KDE 1.0 provides a PGP passphrase as a command line argument to other programs, which could allow local users to obtain the passphrase and compromise the PGP keys of other users by viewing the arguments via programs that list process information, such as ps...

PT-2013-6311 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.14.3 Description: The issue is related to errors in memory handling, specifically in the try to unmap cluster function in mm/rmap.c, which does not properly consider which pages must be locked. This allows loc...