CVE Notifier

CVE-1999-1411 CWE-? N/A

CVE-1999-1411

The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which could automatically enable anonymous FTP on some servers such as wu-ftp.

MITRE n/a:n/a 09 Mar 2002

CVE-1999-1409 CWE-? N/A

CVE-1999-1409

The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submitting the file to at with the -f argument, which generates error messages that at sends to the user v…

MITRE n/a:n/a 09 Mar 2002

CVE-1999-1407 CWE-? N/A

CVE-1999-1407

ifdhcpc-done script for configuring DHCP on Red Hat Linux 5 allows local users to append text to arbitrary files via a symlink attack on the dhcplog file.

MITRE n/a:n/a 09 Mar 2002

CVE-1999-1402 CWE-? N/A

CVE-1999-1402

The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to connect to the socket and possibly disrupt or c…

MITRE n/a:n/a 09 Mar 2002

CVE-1999-1386 CWE-? N/A

CVE-1999-1386

Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file.

MITRE n/a:n/a 09 Mar 2002

CVE-1999-1385 CWE-? N/A

CVE-1999-1385

Buffer overflow in ppp program in FreeBSD 2.1 and earlier allows local users to gain privileges via a long HOME environment variable.

MITRE n/a:n/a 09 Mar 2002

CVE-1999-1384 CWE-? N/A

CVE-1999-1384

Indigo Magic System Tour in the SGI system tour package (systour) for IRIX 5.x through 6.3 allows local users to gain root privileges via a Trojan horse .exitops program, which is called by the inst command that is execu…

MITRE n/a:n/a 09 Mar 2002

CVE-1999-1382 CWE-? N/A

CVE-1999-1382

NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allows local users to gain root privileges by creating a setuid program and setting it to "Read Only," w…

MITRE n/a:n/a 09 Mar 2002

CVE-1999-1380 CWE-? N/A

CVE-1999-1380

Symantec Norton Utilities 2.0 for Windows 95 marks the TUNEOCX.OCX ActiveX control as safe for scripting, which allows remote attackers to execute arbitrary commands via the run option through malicious web pages that ar…

MITRE n/a:n/a 09 Mar 2002

CVE-1999-1379 CWE-? N/A

CVE-1999-1379

DNS allows remote attackers to use DNS name servers as traffic amplifiers via a UDP DNS query with a spoofed source address, which produces more traffic to the victim than was sent by the attacker.

MITRE n/a:n/a 09 Mar 2002

CVE-1999-1363 CWE-? N/A

CVE-1999-1363

Windows NT 3.51 and 4.0 allow local users to cause a denial of service (crash) by running a program that creates a large number of locks on a file, which exhausts the NonPagedPool.

MITRE n/a:n/a 09 Mar 2002

CVE-1999-1360 CWE-? N/A

CVE-1999-1360

Windows NT 4.0 allows local users to cause a denial of service via a user mode application that closes a handle that was opened in kernel mode, which causes a crash when the kernel attempts to close the handle.

MITRE n/a:n/a 09 Mar 2002