CVE-1999-0024

CVE-1999-0024 describes a DNS cache-poisoning flaw in BIND caused by predictable DNS query IDs. The connected sources consistently state DNS cache poisoning via BIND, with related discussions in Red Hat/Security advisories and CERT context. The materials do not provide a concrete patch version or...

CVE-1999-0017

CVE-1999-0017 is a documented FTP bounce vulnerability where an FTP server can be abused to connect to arbitrary ports on an attacker-controlled host by exploiting the PORT/PORT-like mechanisms. The core issue is that an FTP server’s data connection handling allows bounce traffic to other hosts (...

CVE-1999-0368

The CVE-1999-0368 issue involves buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD that can lead to remote root access (palmetto). Red Hat’s entry reiterates the same vulnerability. Nessus plugin 10318 (WU-FTPD Multiple Vulnerabilities) and 10318’s description cite the overflow as enabling...

CVE-1999-0004

CVE-1999-0004 describes a MIME buffer overflow in email clients, notably Solaris mailtool and Outlook. The vulnerability is triggered by MIME handling issues that overflow buffers, leading to a potential denial of service or instability (per CVSS data indicating network attack vector, no authenti...

CVE-1999-0009

Summary of CVE-1999-0009 from connected documents : The issue is an inverse query buffer overflow in BIND releases 4.9 and 8. The Red Hat entry mirrors the description: the vulnerability is an inverse query buffer overflow in BIND 4.9 and 8 releases. Tenable/Nessus references indicate this is a r...

CVE-2005-0109

Technical details for CVE-2005-0109 are not provided in the supplied documents. The set includes historical references and later OpenSSL advisories, but no specific product, root cause, impact, or fix details here. Monitor for updates.

CVE-1999-0010

CVE-1999-0010 describes a Denial of Service vulnerability in BIND 8 releases caused by maliciously formatted DNS messages. Connected docs corroborate the DoS issue and note remediation in HP-UX via patch PHNE_12957 for s700_800 11.00 Bind 4.9.7 components; other records repeat the DoS description...

CVE-1999-0019

Technical details about CVE-1999-0019 are not publicly available in the provided documents. Monitor for official advisories for affected products, impact, and remediation.

CVE-1999-0011

CVE-1999-0011 corresponds to Denial of Service vulnerabilities in BIND 4.9 and BIND 8, reported across multiple vendors. Public records indicate DoS via CNAME records and zone transfers. Affected products include BIND 4.9.x and 8.x; the root cause is not detailed in the provided documents beyond ...

CVE-2004-0996

CVE-2004-0996 affects cscope 15-4 and 15-5 where main.c creates temporary files with predictable names, enabling local symlink attacks to overwrite arbitrary files. The issue is a local-security vulnerability arising from insecure temporary file creation. Publicly documented fixes show upgrades t...

CVE-1999-0078

CVE-1999-0078 affects pcnfsd (rpc.pcnfsd). The vulnerability allows local users to change file permissions or execute arbitrary commands via arguments in the RPC call. Practical impact is limited to local-privilege abuse as described in multiple sources, with no public fixes reported in the docum...

CVE-2003-0914

CVE-2003-0914 affects ISC BIND 8.3.x before 8.3.7 and 8.4.x before 8.4.3. A remote attacker can poison the DNS cache by using a malicious nameserver that returns negative responses with a large TTL, causing legitimate queries to be answered with cached negative results. Remediation mentioned in t...

CVE-1999-0023

CVE-1999-0023 affects the rdist utility, with the vulnerability located in the lookup() function where a buffer overflow can be exploited by a local user to gain root privileges. Connected documents consistently describe local privilege escalation via rdist’s lookup() overflow, with several advis...

CVE-2004-1307

CVE-2004-1307 describes a heap-based buffer overflow in libtiff 3.6.1 triggered by a TIFF file using the STRIPOFFSETS flag with many strips, due to an overflow in TIFFFetchStripThing in tif_dirread.c. The vulnerability could allow remote code execution as a result of processing crafted TIFF files...

CVE-2003-0834

The CVE-2003-0834 issue is a local buffer overflow in the CDE libDtHelp library that allows a local user to execute arbitrary code. The vulnerability is triggered via manipulation of environment-related paths (DTHELPUSERSEARCHPATH, DTHELPSEARCHPATH) or LOGNAME through the Help feature, leading to...

CVE-2002-1323

CVE-2002-1323 concerns Safe.pm (versions <= 2.0.7) used with Perl

CVE-2003-0937

CVE-2003-0937 affects SCO UnixWare 7.1.1, 7.1.3 and Open UNIX 8.0.0. Local users can bypass protections on the process AS (as) by obtaining a procfs descriptor for a PID and then execve() a setuid/setgid binary, leaving the descriptor open to the user (local privilege escalation). According to ad...

CVE-1999-0845

The CVE-1999-0845 entry describes a buffer overflow in the SCO ‘su’ program that allows a local user to gain root privileges by supplying a long username. The vulnerable component is the su utility on SCO Unix-like systems; impact is local privilege escalation to root . Connected documents corrob...

CVE-1999-0033

CVE-1999-0033 : Description indicates command execution on Sun systems caused by a buffer overflow in the at program. Affected software: Sun systems, component: at. Root cause: buffer overflow in at allows arbitrary command execution. Impact: unauthorized command execution with likely complete sy...

CVE-1999-1450

Technical details about CVE-1999-1450 are not publicly available in the provided documents. Monitor for updates.

CVE-2003-0658

The CVE-2003-0658 issue affects Docview prior to 1.1-18 in Caldera OpenLinux 3.1.1, SCO Linux 4.0, and OpenServer 5.0.7, where Apache is misconfigured to allow remote attackers to read arbitrary publicly readable files via a specific URL (likely related to rewrite rules). The PT security document...

CVE-1999-0830

Affects SCO UnixWare Xsco command; vulnerability is a buffer overflow caused by mishandling long arguments. The PT-1999-1384 entry specifies SCO UnixWare as affected and notes that details on the exact affected versions are not provided and that there is no information about a fix in newer versio...

CVE-1999-0835

CVE-1999-0835 describes a denial-of-service in BIND named caused by a buffer overflow in the rrextract routine when decoding SIG records. In particular, for T_SIG, the code computes an unsigned length and copies data with a potentially large third argument to memcpy if the computed length is malf...

CVE-1999-0851

CVE-1999-0851 affects ISC BIND with a denial-of-service via naptr. Connected sources indicate multiple remote vulnerabilities in BIND and provide a remediation: upgrade to BIND 8.2.2-P5 or 4.9.7-REL. The vulnerability is described as DoS on the named service; no exploit details or vector are prov...

CVE-1999-0988

The CVE-1999-0988 entry describes a local-file read vulnerability in UnixWare pkgtrans where a symlink attack allows a local user to read arbitrary files. Affected component: UnixWare pkgtrans (local-exploit path). Root cause: symlink race enabling leakage of file contents. Impact: Confidentialit...

CVE-2000-0130

CVE-2000-0130 concerns a buffer overflow in the SCO scohelp program that allows remote command execution. The existing sources (NVD/CVE records) confirm the vulnerable component as SCO scohelp and describe the impact as execution of commands by an remote attacker, with a base score of 7.2 (HIGH) ...

CVE-1999-0836

Technical details about CVE-1999-0836 are not publicly available in the provided documents. Monitor for updates from official advisories; the material here only notes a symlink attack enabling local file modification on UnixWare uidadmin.

CVE-2000-0307

The vulnerability CVE-2000-0307 affects the xserver component in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier. It enables a denial of service that prevents access to reserved port numbers below 1024. Public records do not provide exploit details, additional affected versions beyond the stat...

CVE-2004-1039

The CVE-2004-1039 issue affects SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1 (and possibly other versions) when NFS mountd is run via inetd. The vulnerability arises because inetd spawns a new mountd process for each NFS mount-related request, causing memory exhaustion and potentially a system cra...

CVE-2000-0003

The CVE-2000-0003 entry describes a buffer overflow in the UnixWare rtpm program that allows local users to gain privileges via a long environmental variable. The available sources confirm the affected component as UnixWare’s rtpm and identify the root cause as a buffer overflow triggered by long...

CVE-2000-0026

CVE-2000-0026 affects UnixWare’s i2odialogd daemon. A buffer overflow is triggered by a too-long username/password string sent to the remote service, allowing an attacker to potentially execute arbitrary code with root privileges. The vulnerability is documented across multiple sources (CVE/NVD) ...

CVE-2001-1579

The CVE-2001-1579 entry concerns the timed program (in.timed) in UnixWare 7 and OpenUnix 8.0.0. The root cause is improper termination of certain strings with a null character, which permits remote attackers to trigger a denial of service. The Red Hat CVE page corroborates the same description. P...

CVE-2005-3903

CVE-2005-3903 documents a local privilege escalation in SCO Unixware 7.1.3 and 7.1.4 caused by a buffer overflow in the setuid binary uidadmin when processing a long -S (scheme) argument that specifies a large file. The vulnerability arises from a failure to bound the input length, enabling a loc...

CVE-2008-6558

Untrusted search path vulnerability in ReliantHA 1.1.4 (SCO UnixWare 7.1.4) affects hvdisp and rcvm. Local users can gain root privileges by setting RELIANT_PATH to a malicious bin/hvenv, exploiting an untrusted PATH search. Affected components: RELIANT_PATH environment variable usage in hvdisp/r...

CVE-2000-0308

CVE-2000-0308 affects Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 on SCO UnixWare 7.0.x/2.1.3. Insecure file permissions could allow an attacker to gain root privileges. The initial description does not provide exploit specifics or a patched version; no exploitation...

CVE-2005-2927

CVE-2005-2927: Local buffer overflow in SCO UnixWare 7.1.3/7.1.4 (ppp prompt/defprompt) allows local users to run arbitrary code due to an unchecked long argument to the ppp binary (ppptalk) where the binary is setuid root. Vulnerable binaries include /usr/bin/ppptalk; impact is root privilege es...

CVE-2000-0099

CVE-2000-0099 describes a local privilege escalation in UnixWare via a buffer overflow in the ppptalk command caused by a long prompt argument. The vulnerability arises from an unchecked input length, enabling local users to gain privileges with complete impact on confidentiality, integrity, and ...

CVE-1999-0798

CVE-1999-0798 : The vulnerability is a buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux caused by a malformed header type. This year‑old CVE is referenced across multiple feeds (NVD, Red Hat, CVE List) with consistent description. Impact described in sources as a buffer overflow affecting...

CVE-1999-0828

CVE-1999-0828 affects UnixWare pkg commands (pkginfo, pkgcat, pkgparam); local users can read arbitrary files via the dacread permission. The provided sources state the vulnerability and impact (partial confidentiality/integrity) but do not include explicit exploit details or a remediation. No ad...

CVE-1999-0864

CVE-1999-0864 involves UnixWare programs that dump core; a local user can modify files via a symlink attack on the ./core.pid file. The description notes a local-privilege/impact vector but provides no remediation or explicit exploit details in the supplied documents. The connected documents do n...

CVE-1999-0942

UnixWare dos7utils is affected by CVE-1999-0942. A local user can gain root privileges by using the STATICMERGE environment variable to locate and execute a script. The vulnerability is triggered by how STATICMERGE is resolved and used by the utility, enabling privilege escalation. Affected versi...

CVE-2000-0348

The vulnerability CVE-2000-0348 affects the Sendmail configuration file sendmail.cf in SCO UnixWare 7.1.0 and earlier. The issue allows an attacker to gain root privileges by exploiting the misconfiguration in sendmail.cf. The connected documents do not provide additional exploit details, affecte...

CVE-1999-0693

CVE-1999-0693 describes a buffer overflow in the TT_SESSION environment variable within the ToolTalk shared library that can allow a local attacker to gain root privileges via the ToolTalk RPC service. The vulnerability is associated with the ToolTalk RPC service, sometimes referred to as the Too...

CVE-1999-0825

CVE-1999-0825 affects UnixWare: default permissions on /var/mail allow local users to read and modify other users’ mail, risking partial confidentiality and integrity (CVSSv2: 3.6/6.0, LOCAL). The connected documents do not provide explicit exploitation details or remediation steps; no affected v...

CVE-1999-0979

The vulnerability CVE-1999-0979 affects the SCO UnixWare privileged process system. Local users can gain root privileges by using a debugger (e.g., gdb) to insert traps into _init before the privileged process runs. The issue is triggered through manipulating the startup path of the privileged in...

CVE-2005-0134

Technical details about CVE-2005-0134 are not publicly available in the provided connected documents. No affected versions, root cause, impact, or mitigations are disclosed here. Monitor for updates.

CVE-2000-0029

Technical details about CVE-2000-0029 are not publicly provided in the supplied documents; only the basic description is available. Monitor for updates.

CVE-2000-0351

The vulnerability CVE-2000-0351 affects SCO UnixWare 7.1.0 packaging commands that grant insecure privileges, enabling local users to add or remove software packages. Connected sources (NVD, CVE List, CVE record, EUVD) corroborate that this is a local-privilege issue impacting the packaging subsy...

CVE-2006-4655

CVE-2006-4655 affects the X Window System X11R6.4 and earlier: a buffer overflow in the XKEYBOARD extension Strcmp() enables local privilege escalation via a long _XKB_CHARSET environment variable. Affected platforms include SCO UnixWare 7.1.3 and Sun Solaris 8–10. Public exploitation exists (e.g...

CVE-2008-0310

CVE-2008-0310 describes a local privilege escalation in SCO UnixWare 7.1.4 before patch p534589. The vulnerability lies in the pkgadd command, which improperly handles an environment variable (likely PKGINST) during package installation, allowing a local user to traverse directories using ".." se...