CVE-2000-0633

Technical details for CVE-2000-0633 are not publicly available in the provided documents. The description notes a local reboot/halt issue in the Mandrake Linux usermode package, but no specifics on affected versions, root cause, or fixes are supplied. Monitor for updates.

CVE-2001-0197

CVE-2001-0197 affects the Icecast server: vulnerable in the print_client function for Icecast versions 1.3.8beta2 and earlier. The issue is a format-string vulnerability that allows remote attackers to execute arbitrary commands. The Debian advisory notes fixes in Icecast 1.3.10-1, indicating a p...

CVE-2004-1333

The CVE-2004-1333 entry describes an integer overflow in the vc_resize function of Linux kernel 2.4 and 2.6 before 2.6.10, which allows local users to trigger a kernel crash (DoS) via a short new screen value that leads to a buffer overflow. This is the only concrete detail provided in the initia...

CVE-1999-0434

The CVE-1999-0434 entry documents a vulnerability in the XFree86 xfs command where a symlink attack enables local users to create files in restricted directories, potentially leading to privilege escalation or a denial of service. Connected sources corroborate the issue as a symlink-based file cr...

CVE-2000-0017

The CVE-2000-0017 entry describes a buffer overflow in the Linux linuxconf package that allows remote attackers to gain root privileges via a long parameter. This is supported by the NVD entry and corroborated by OpenVAS/PT-Security records referencing linuxconf and the same issue. The available ...

CVE-2002-1155

CVE-2002-1155 describes a buffer overflow in KON kon2 (versions up to 0.3.9b) that allows a local user to execute arbitrary code via a long -Coding command line argument. The vulnerability affects the command line parsing in KON2 and can lead to root-privelege escalation. Public references includ...

CVE-1999-0297

The CVE-1999-0297 issue is a buffer overflow in the Vixie Cron library up to version 3.0, enabling local users to obtain root access via a long environmental variable. The vulnerability is caused by a buffer overflow in the library's handling of environment data. Impact is local privilege escalat...

CVE-2001-0439

CVE-2001-0439 affects Licq prior to 1.0.3. The vulnerability stems from how Licq parses received URLs: the URL is passed to the web browser via system() without sufficient input validation, allowing a remote attacker to inject shell metacharacters and execute arbitrary commands. Impact is remote ...

CVE-2001-0441

CVE-2001-0441 describes a buffer overflow in the slrn news reader (wrapping and unwrapping functions) that allows remote code execution via a long message header. The vulnerability affects versions prior to the fixed releases cited in connected advisories: Debian DSA-040-1 and Mandrake MDKSA-2001...

CVE-2001-0635

Red Hat Linux 7.1 is affected by CVE-2001-0635 due to insecure permissions on swap files created at install. The swap files could be world-readable, enabling a local attacker to read sensitive data such as passwords and potentially escalate privileges. The connected Red Hat advisory RHSA-2001:058...

CVE-2002-1814

Bonobo’s efstools contains a local buffer overflow when installed setuid, allowing a local user to trigger arbitrary code execution through excessively long command line arguments. Affected component: efstools within Bonobo. Root cause: unchecked/buffered input handling leading to overflow when h...

CVE-1999-0705

CVE-1999-0705 concerns a buffer overflow in INN inews. The interconnected sources indicate multiple vulnerabilities in INN

CVE-1999-1329

The CVE describes a local privilege escalation caused by a buffer overflow in SysVInit on Red Hat Linux 5.1 and earlier. Affected component: SysVInit; vulnerable action: buffer overflow leading to privilege gain. Root cause: overflow in SysVInit that permits local users to escalate privileges to ...

CVE-1999-1496

CVE-1999-1496 affects Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 . Local users can infer the existence of arbitrary files by attempting to execute the target filename as a program, which yields different error messages depending on whether the file exists. This indicates a minor information-dis...

CVE-2000-0606

The CVE describes a buffer overflow in the kon program within Kanji on Console (KON) on Linux. The vulnerability is triggered by a long -StartupMessage parameter in KON, potentially allowing local users to gain root privileges. No versions, affected distributions, or explicit exploit details are ...

CVE-2001-0736

This CVE (CVE-2001-0736) affects the Pine email client (and pico editor) prior to version 4.33, where a local user can overwrite arbitrary files via a symlink attack. The vulnerability allows any local user to overwrite files owned by other users, including root, under certain conditions. A fix i...

CVE-2003-0188

CVE-2003-0188: lv, a multilingual file viewer, reads a .lv configuration file from the current working directory. A crafted .lv file placed in a directory can cause lv to execute arbitrary commands as the invoking user, enabling local privilege escalation (including root) on affected systems. Pub...

CVE-2007-5079

CVE-2007-5079 affects Red Hat Enterprise Linux 4 in the gdm package, where the gdm build on x86_64 platforms was missing TCP wrappers support, potentially allowing a remote attacker to bypass access restrictions. The issue is tied to a missing TCP wrappers mechanism rather than a new vulnerabilit...

CVE-1999-0872

CVE-1999-0872 is a vulnerability in Vixie cron where a buffer overflow can be triggered by a long MAILTO value in a crontab, enabling local users to gain root access. The Red Hat CVE entry and related records confirm the issue but do not provide remediation steps or patched versions in the connec...

CVE-2000-0389

CVE-2000-0389 describes a buffer overflow in the krb_rd_req function used by Kerberos 4 and Kerberos 5, enabling remote attackers to gain root privileges. The vulnerability is evidenced across multiple feeds (NVD, CVE List, Nessus plugin) and linked advisories (CERT CA-2000-06, Bugtraq/archives)....

CVE-2000-0531

CVE-2000-0531 : Linux gpm program vulnerability where local users can cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets. The NVD entry shows a LOCAL attack vector, LOW base severity, and PARTIAL availability impact; no remediation or workaround details are provided ...

CVE-2001-0641

CVE-2001-0641 concerns a buffer overflow in the man program across various Linux distributions. The vulnerability allows a local unprivileged user to execute arbitrary code with the effective group Man ID by supplying a very long -S option. This is a local-privilege escalation via memory corrupti...

CVE-1999-1332

Technical details about CVE-1999-1332 are not publicly provided in the connected documents you supplied; existing entries mention the vulnerability in gzexe but do not reveal affected versions, impact specifics, or fixes.

CVE-2000-0701

The vulnerability CVE-2000-0701 affects the Mailman project’s wrapper program in versions 2.0beta3 and 2.0beta4. The root cause is improper cleansing of untrusted format strings, which permits local privilege escalation. The NVD entry lists local attack vector with low complexity and partial impa...

CVE-2001-0128

Zope before 2.2.4 contains a bug in how local roles are computed, enabling bypass of access restrictions and privilege escalation. The issue is documented across multiple sources (NVD/CVE entry and Mandrake MDKSA-2000:086) and affects Zope 2.2.4 and earlier. Remediation is to apply the update to ...

CVE-2001-0946

The vulnerability CVE-2001-0946 affects Red Hat 7.2 (Enigma) via apmd/apmscript, where a local attacker can craft a symlink to the LOW_POWER temporary file to create or modify the modification times of arbitrary files. This could be used to trigger a denial of service, for example by creating /et...

CVE-2002-0002

The connected advisory confirms a format-string vulnerability in stunnel for client-mode negotiations (smtp, pop, nntp). Affected versions: 3.15 through 3.21c; 3.22 is not vulnerable. The flaw arises in the functions that implement client-side SMTP/POP/NNTP negotiations, allowing a malicious serv...

CVE-1999-0037

CVE-1999-0037 describes an arbitrary command execution in the metamail package when a user processes an attacker’s message with malicious content in its headers. The vulnerability stems from how metamail handles message headers during processing, enabling an attacker to execute commands on the af...

CVE-1999-0894

The CVE-1999-0894 issue concerns the Red Hat Linux screen program that does not use Unix98 ptys, enabling local users to write to other terminals. The connected PT-2000-1029 entry reiterates the Red Hat Linux screen issue and notes that no information about a newer version containing a fix is ava...

CVE-2000-0315

Technical specifics (affected products, vulnerable components, root cause, and fixes) are not publicly provided in the connected documents. Monitor for updates.

CVE-2001-0139

Inn 2.2.3 is vulnerable to a local temporary-file race condition. The root cause is inn creating temporary files in a world-writable directory (or being configured to use one), enabling symlink attacks that may modify files writable by the news user. Mandrake/MDKSA-2001:010 notes a patch that rel...

CVE-2000-0390

CVE-2000-0390 describes a buffer overflow in the krb425_conv_principal function of Kerberos 5. The vulnerability allows remote attackers to gain root privileges via the affected Kerberos 5 component. Documents identify the root cause as a buffer overflow in the krb425_conv_principal routine, with...

CVE-2000-0963

The CVE-2000-0963 vulnerability is a local buffer overflow in the ncurses library that can allow execution of arbitrary commands via overly long environment variables (TERM or TERMINFO_DIRS). Connected PT-2000-1003 and other records specify affected software as ncurses versions 5.0–5.2 and ncurse...

CVE-2001-1374

Summary (concrete details from connected documents): The vulnerability is in the expect utility prior to version 5.32, where it searches for its libraries in /var/tmp before other directories. A local attacker could exploit this by placing a Trojan horse library that mkpasswd would load, potentia...

CVE-1999-1333

CVE-1999-1333 affects ncftp 2.4.2 and earlier on Red Hat Linux 5.0 and earlier. The automatic download option can be abused by remote attackers to execute arbitrary commands via shell metacharacters in the names of files to be downloaded. The provided documents do not specify a remediation versio...

CVE-2000-0186

The CVE-2000-0186 entry concerns a buffer overflow in the dump utility of the Linux ext2fs backup package. The underlying issue is a too-long command line argument, which can allow a local user to gain privileges. The affected component is the dump utility within the ext2fs backup toolchain; the ...

CVE-2000-0196

The CVE-2000-0196 entry concerns the Linux nmh package’s mhshow utility. A vulnerability in mhshow’s handling of MIME headers can cause a buffer overflow, enabling remote command execution by an attacker via a crafted email message. The description explicitly states that this allows remote attack...

CVE-2000-0355

CVE-2000-0355 affects SuSE pbpg 1.x, where the vulnerable components are pg and pb. The underlying issue allows an attacker to read arbitrary files. This summary is based on public records (NVD/CVE entries) and applies to the SuSE pbpg 1.x package. The connected documents confirm the affected com...

CVE-2000-1207

CVE-2000-1207 affects the userhelper component in the Red Hat Linux usermode package. It executes non-setuid programs as root, which prevents glibc security measures from activating. This creates a local exposure where vulnerable programs can be exploited via format string weaknesses in glibc, tr...

CVE-2000-1220

CVE-2000-1220 affects the line printer daemon (lpd) in the lpr package across multiple Linux distributions. The vulnerability lets local users gain root privileges by causing sendmail to be invoked with arbitrary command line arguments through a crafted -C configuration file option. This is trigg...

CVE-2001-0120

CVE-2001-0120 relates to the shadow-utils package, specifically the useradd component. The vulnerability arises from insecure temporary file handling: useradd creates temporary files in /etc/default with predictable names. If /etc/default is world-writable, an attacker could perform a symbolic-li...

CVE-2001-0473

CVE-2001-0473 affects the Mutt email client (Imap-related code) prior to version 1.2.5. The vulnerability is a format string issue in the IMAP handling that can allow a remote, malicious IMAP server to execute arbitrary commands on the local machine. The Mandrakelinux MDKSA-2001:031 advisory spec...

CVE-2003-0194

tcpdump (affected up to versions prior to the Red Hat patches) had a bug where privileges were not dropped to user 'pcap' at startup due to a compilation error, causing it to run as root unless the -U flag was used. Red Hat advisories RHSA-2003:151 and related NASL/redhat entries describe updated...

CVE-1999-0704

The CVE refers to a buffer overflow in the Berkeley automounter daemon (amd) logging facility included with the Linux am-utils package and related software. Affected component: amd’s logging facility; underlying issue: buffer overflow. Potential impact per sources: complete confidentiality, integ...

CVE-1999-1331

Affected software: netcfg 2.16-1 on Red Hat Linux 4.2. Vulnerability: Local users can control the Ethernet interface on reboot when a specific option is set, enabling a denial of service by shutting down the interface. Root cause/trigger: The description indicates the interface control occurs at ...

CVE-2000-0263

CVE-2000-0263 affects the X font server (xfs) on Red Hat Linux 6.x. A malformed request can cause a denial of service, impacting availability (CVSS v2 base score 2.1). Vector: local, low complexity, no authentication required; impact is limited to availability. No explicit remediation details are...

CVE-2000-0607

Technical details about CVE-2000-0607 are not provided in the supplied connected documents. The description in the Initial document notes a buffer overflow in KON on Linux, but no affected versions, impact specifics, or remediation are disclosed here. Monitor for updates.

CVE-2000-0750

CVE-2000-0750 involves a buffer overflow in mopd (Maintenance Operations Protocol loader daemon). The vulnerability allows remote attackers to execute arbitrary commands by supplying a long file name, indicating a remote code execution risk via crafted input. The affected component is mopd, and t...

CVE-2001-0233

CVE-2001-0233 affects the micq client (versions 0.4.6 and earlier). The vulnerability is a remote buffer overflow in the handling of a long Description field (via sprintf), allowing a remote attacker to cause a denial of service and possibly execute arbitrary code. Multiple connected sources (Deb...

CVE-2001-0787

CVE-2001-0787 affects LPRng in Red Hat Linux 7.0 and 7.1, where dropping privileges does not remove supplemental group memberships. The underlying issue is that LPRng fails to drop these group memberships when lowering privileges, so the process and its children may retain the starting process’s ...