Monthly Archive: September 1999

The GNU tar command, when used in FTP sessions, may allow an attacker to execute arbitrary commands. Date published : 1999-09-29

A quote cwd command on FTP servers can reveal the full path of the home directory of the "ftp" user. Date published : 1999-09-29

websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver variable). Date published : 1999-09-29 http://www.securityfocus.com/bid/2077

Denial of service in in.comsat allows attackers to generate messages. Date published : 1999-09-29

Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable. Date published : 1999-09-29

IIS newdsn.exe CGI script allows remote users to overwrite files. Date published : 1999-09-29 http://www.osvdb.org/275

Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access. Date published : 1999-09-29 http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/167

The passwd command in Solaris can be subjected to a denial of service. Date published : 1999-09-29 http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/182

In SunOS or Solaris, a remote user could connect from an FTP server’s data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution. Date published :...

When compiled with the -DALLOW_UPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious modification of DNS records. Date published : 1999-09-29

Linux implementations of TFTP would allow access to files outside the restricted directory. Date published : 1999-09-29

Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password. Date published : 1999-09-29 http://www.ciac.org/ciac/bulletins/h-110.shtml

The wall daemon can be used for denial of service, social engineering attacks, or to execute remote commands. Date published : 1999-09-29

in.rshd allows users to login with a NULL username and execute commands. Date published : 1999-09-29