nt.ie5.scheduler.txt

Subject: Windows NT Task Scheduler vulnerability allows user to administrator elevation Date: Thu Dec 02 1999 00:00:50 Author: Arne Vidstrom Hi all, We've found a vulnerability that the installation of Internet Explorer 5 introduces in Windows NT through the Task Scheduler service. This...

CVE-1999-0860

Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack...

CVE-2000-0531

Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets...

CVE-1999-0044

fsdump command in IRIX allows local users to obtain root access by modifying sensitive files...

CVE-1999-0422

The CVE-1999-0422 issue affects NetBSD 1.3.3 where the mount functionality allows local users to execute programs in file systems that have the noexec flag set. Root cause is a problem in mount; impact is local execution of potentially untrusted code within those noexec file systems. Public recor...

milo-alpha-linux-DoS.txt

Date: Fri, 5 Feb 1999 17:39:53 -0500 From: Dave G. To: [email protected] Subject: KSRT 009: Non Privileged Halt KSRT Security Advisories http://www.ksrt.org [email protected] --- KSRT Advisory 009 Date: Feb. 5th 1999 ID : NonPrivdHALT Affected Program: MILO/Alpha Linux Operating Systems: Linux...

CVE-1999-1244

IPFilter 3.2.3 through 3.2.10 allows local users to modify arbitrary files via a symlink attack on the saved output file...

CVE-1999-1409

The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submitting the file to at with the -f argument, which generates error messages that at sends to the user via e-mail...

CVE-1999-1407

ifdhcpc-done script for configuring DHCP on Red Hat Linux 5 allows local users to append text to arbitrary files via a symlink attack on the dhcplog file...

CVE-1999-0114

Local users can execute commands as other users, and read other users' files, through the filter command in the Elm elm-2.4 mail package using a symlink attack...

CVE-1999-1426

Solaris Solstice AdminSuite AdminSuite 2.1 follows symbolic links when updating an NIS database, which allows local users to overwrite arbitrary files...

CVE-1999-1214

The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cause a denial of service by using certain ioctl and fcntl calls to cause the signal to be sent to an arbitrary process ID...

FreeBSD-SA-97:03.sysinstall

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-97:03 Security Advisory FreeBSD, Inc. Topic: sysinstall bug Category: core Module: sysinstall Announced: 1997-04-07 Affects: FreeBSD 2.1, FreeBSD 2.1.5, FreeBSD 2.1.6 and...

CVE-1999-1311

Vulnerability in dtlogin and dtsession in HP-UX 10.20 and 10.10 allows local users to bypass authentication and gain privileges...

CVE-1999-1243

SGI Desktop Permissions Tool in IRIX 6.0.1 and earlier allows local users to modify permissions for arbitrary files and gain privileges...

IRIX 5.2/6.0 - Permissions File Manipulation

source: https://www.securityfocus.com/bid/1751/info The IRIX's /usr/lib/desktop/permissions tool is a suid and sgid root applications normally used by users to modify permissions of their files and files they are privileged for. A vulnerability in the permissions tool allows local malicious users...

Security Update for Windows Server 2003 for Itanium-based Systems (KB923414)

A security issue has been identified in the Server service that could allow a remote user to cause an affected Windows-based system to stop responding. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer...

Security Update For Exchange Server 2013 CU20 (KB4340731)

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the System user. An attacker could then install programs;...