Monthly Archive: September 1999

Land IP denial of service. Date published : 1999-09-29

Unauthorized privileged access or denial of service via dtappgather program in CDE. Date published : 1999-09-29 http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9801-075

Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user. Date published : 1999-09-29

Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names. Date published : 1999-09-29

Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer. Date published : 1999-09-29 http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9808-083

Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages. Date published : 1999-09-29 http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9808-083

Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases. Date published : 1999-09-29 http://www.securityfocus.com/bid/134

Buffer overflow in NIS+, in Sun’s rpc.nisd program. Date published : 1999-09-29

Information from SSL-encrypted sessions via PKCS #1. Date published : 1999-09-29 https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-002

Buffer overflow in POP servers based on BSD/Qualcomm’s qpopper allows remote attackers to gain root access using a long PASS command. Date published : 1999-09-29 http://www.securityfocus.com/bid/133

Arbitrary command execution via IMAP buffer overflow in authenticate command. Date published : 1999-09-29 http://www.securityfocus.com/bid/130

Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd). Date published : 1999-09-29 http://www.securityfocus.com/bid/122

Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems. Date published : 1999-09-29 http://www.securityfocus.com/bid/121