Monthly Archive: September 1999

Remote attackers can cause a denial of service in FTP by issuing multiple PASV commands, causing the server to run out of available ports. Date published : 1999-09-29

Predictable TCP sequence numbers allow spoofing. Date published : 1999-09-29 https://exchange.xforce.ibmcloud.com/vulnerabilities/139

PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password. Date published : 1999-09-29 http://www.osvdb.org/5742

Listening TCP ports are sequentially allocated, allowing spoofing attacks. Date published : 1999-09-29

Telnet allows a remote client to specify environment variables including LD_LIBRARY_PATH, allowing an attacker to bypass the normal system libraries and gain root access. Date published : 1999-09-29

Buffer overflow in AIX xdat gives root access to local users. Date published : 1999-09-29

Apache httpd cookie buffer overflow for versions 1.1.1 and earlier. Date published : 1999-09-29

test-cgi program allows an attacker to list files on the server. Date published : 1999-09-29 https://lists.apache.org/thread.html/rc5d27fc1e76dc5650e1a3f1db1de403120f4c2d041cb7352850455c2@%3Cusers.httpd.apache.org%3E

Solaris ufsrestore buffer overflow. Date published : 1999-09-29 http://www.osvdb.org/8158 http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/169

CGI PHP mylog script allows an attacker to read any file on the target server. Date published : 1999-09-29 http://www.securityfocus.com/bid/713

phf CGI program allows remote command execution through shell metacharacters. Date published : 1999-09-29 http://www.securityfocus.com/bid/629

AnyForm CGI remote execution. Date published : 1999-09-29 http://www.securityfocus.com/bid/719

Multiple buffer overflows in how dtmail handles attachments allows a remote attacker to execute commands. Date published : 1999-09-29 http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/181

Buffer overflow in AIX lquerylv program gives root access to local users. Date published : 1999-09-29