Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
1999-12-04 CVE-1999-0988 Unspecified vulnerability in SCO Unixware
UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack.
local
low complexity
sco
7.2
1999-12-03 CVE-2000-0358 Unspecified vulnerability in Redhat Linux 6.1
ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program.
network
low complexity
redhat
5.0
1999-12-03 CVE-2000-0357 Unspecified vulnerability in Redhat Linux 6.1
ORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local users to guess the authentication keys.
network
low complexity
redhat
7.5
1999-12-03 CVE-2000-0139 Unspecified vulnerability in True North Internet Anywhere Mail Server 3.1.3
Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command.
local
low complexity
true-north
2.1
1999-12-03 CVE-1999-0866 Unspecified vulnerability in SCO Unixware
Buffer overflow in UnixWare xauto program allows local users to gain root privilege.
local
low complexity
sco
7.2
1999-12-03 CVE-1999-0865 Unspecified vulnerability in Stalker Communigate PRO 3.1
Buffer overflow in CommuniGatePro via a long string to the HTTP configuration port.
network
low complexity
stalker
5.0
1999-12-03 CVE-1999-0825 Unspecified vulnerability in SCO Unixware 7.0/7.0.1/7.1
The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail.
local
low complexity
sco
3.6
1999-12-02 CVE-2000-0366 Unspecified vulnerability in Debian Linux 2.1
dump in Debian GNU/Linux 2.1 does not properly restore symlinks, which allows a local user to modify the ownership of arbitrary files.
local
low complexity
debian
2.1
1999-12-02 CVE-1999-0862 Unspecified vulnerability in Postgresql 6.3.2/6.5.3/6.5.3.1
Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file.
local
low complexity
postgresql
2.1
1999-12-02 CVE-1999-0852 Unspecified vulnerability in IBM Websphere Application Server 3.0
IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin.
local
low complexity
ibm
7.2