CVE Vulnerability Catalog

Solaris Solstice AdminSuite 2.1 uses unsafe permissions when adding new users to the NIS+ password table, allowing local users to gain root access by modifying their password table entries.

Solaris Solstice AdminSuite 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges by modifying /etc/passwd.

Solaris Solstice AdminSuite 2.1 follows symbolic links when updating an NIS database, allowing local users to overwrite arbitrary files.

Solaris Solstice AdminSuite versions 2.1 and 2.2 create lock files insecurely, allowing local users to gain root privileges.

Solaris Solstice AdminSuite versions 2.1 and 2.2 allow local users to gain elevated privileges via the save option in the Database Manager, which is running with setgid bin privileges.

Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the icatcommand parameter.

CVE-1999-0216 vulnerability affects the inetd service on Linux, which can be targeted for denial of service (DoS) attacks through SYN and RST packets.

The piodmgrsu command in AIX allows local users to gain additional group privileges.

Buffer overflow in the OSF Distributed Computing Environment (DCE) security daemon (secd) in IRIX 6.4 and earlier allows attackers to cause a denial of service via a long principal, group, or organization.

Buffer overflow in Rainbow Six Multiplayer allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long nickname (nick) command.

The CGI PHP mlog script allows an attacker to read any file on the target server.

A vulnerability in the BSD line printer daemon (lpd) allows for file creation and deletion, as well as remote code execution.

Vulnerability in telnet service in HP-UX 10.30 allows attackers to cause a denial of service.

Vulnerability in the HP-UX mediainit program may lead to unauthorized access to the system.

All records in a WINS database can be deleted through SNMP, leading to denial of service.

CVE-1999-0272 vulnerability involves a denial of service attack in Slmail version 2.5 through the POP3 port.

Race condition in xterm allows local users to modify arbitrary files via the logging option.

Remote attackers can cause a denial of service in FTP by issuing multiple PASV commands, causing the server to run out of available ports.

Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file with insecure permissions.

HP-UX 9.x and 10.x running X windows may allow local attackers to gain privileges via vuefile, vuepad, dtfile, or dtpad, which do not authenticate users.