Monthly Archive: September 1999

HP-UX vgdisplay program gives root access to local users. Date published : 1999-09-29 http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9702-056

HP-UX gwind program allows users to modify arbitrary files. Date published : 1999-09-29 http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9410-018

The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed packets even when the (1) dosourceroute or (2)...

Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames. Date published : 1999-09-29

SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server. Date published : 1999-09-29 http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/176

Buffer overflow in SunOS/Solaris ps command. Date published : 1999-09-29 http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/149

nis_cachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers. Date published : 1999-09-29 http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/155

Buffer overflow in FreeBSD lpd through long DNS hostnames. Date published : 1999-09-29 http://www.osvdb.org/6093

Solaris volrmmount program allows attackers to read any file. Date published : 1999-09-29 http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/162

Solaris sysdef command allows local users to read kernel memory, potentially leading to root privileges. Date published : 1999-09-29 http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/157

All records in a WINS database can be deleted through SNMP for a denial of service. Date published : 1999-09-29

AAA authentication on Cisco systems allows attackers to execute commands without authorization. Date published : 1999-09-29

Denial of service through Winpopup using large user names. Date published : 1999-09-29

The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL. Date published : 1999-09-29