Tagged “exploit-available”
CVEs tagged exploit-available, newest first.
9306 CVEsRSS
CVE-1999-1026High· 7.2PoCaspppd on Solaris 2.5 x86 allows local users to modify arbitrary files and gain root privileges via a symlink attack on the /tmp/.asppp.fifo file.
aspppd on Solaris 2.5 x86 allows local users to modify arbitrary files and gain root privileges via a symlink attack on the /tmp/.asppp.fifo file.
CVE-1999-0128Medium· 5.0PoCOversized ICMP ping packets can result in a denial of service, aka Ping o' Death.
Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.
CVE-1999-0101Critical· 10.0PoCBuffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.
Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.
CVE-1999-0045High· 7.5PoCList of arbitrary files on Web host via nph-test-cgi script.
List of arbitrary files on Web host via nph-test-cgi script.
CVE-1999-0044High· 7.2PoCfsdump command in IRIX allows local users to obtain root access by modifying sensitive files.
fsdump command in IRIX allows local users to obtain root access by modifying sensitive files.
CVE-1999-0050High· 7.2PoCBuffer overflow in HP-UX newgrp program.
Buffer overflow in HP-UX newgrp program.
CVE-1999-0130High· 7.2PoCLocal users can start Sendmail in daemon mode and gain root privileges.
Local users can start Sendmail in daemon mode and gain root privileges.
CVE-1999-1384High· 7.2PoCIndigo Magic System Tour in the SGI system tour package (systour) for IRIX 5.x through 6.3 allows local users to gain root privileges via a Trojan horse .exitops program, which is called by the inst command that is executed by the Remove…
Indigo Magic System Tour in the SGI system tour package (systour) for IRIX 5.x through 6.3 allows local users to gain root privileges via a Trojan horse .exitops program, which is called by the inst command that is executed by the Remove…
CVE-1999-0032High· 7.2PoCBuffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.
Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.
CVE-1999-0116Medium· 5.0PoCDenial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to complete the connection, aka SYN flood.
Denial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to complete the connection, aka SYN flood.
CVE-1999-1413Medium· 4.6PoCSolaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users to overwrite or create files at higher privileges by causing a core dump, e.g
Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users to overwrite or create files at higher privileges by causing a core dump, e.g. …
CVE-1999-0023High· 7.2PoCLocal user gains root privileges via buffer overflow in rdist, via lookup() function.
Local user gains root privileges via buffer overflow in rdist, via lookup() function.
CVE-1999-0137High· 7.2PoCThe dip program on many Linux systems allows local users to gain root access via a buffer overflow.
The dip program on many Linux systems allows local users to gain root access via a buffer overflow.
CVE-1999-0175Medium· 5.0PoCThe convert.bas program in the Novell web server allows a remote attackers to read any file on the system that is internally accessible by the web server.
The convert.bas program in the Novell web server allows a remote attackers to read any file on the system that is internally accessible by the web server.
CVE-1999-0070Medium· 5.0PoCtest-cgi program allows an attacker to list files on the server.
test-cgi program allows an attacker to list files on the server.
CVE-1999-0233Critical· 10.0PoCIIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files.
IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files.
CVE-1999-0103Medium· 5.0PoCEcho and chargen, or other combinations of UDP services, can be used in tandem to flood the server, a.k.a
Echo and chargen, or other combinations of UDP services, can be used in tandem to flood the server, a.k.a. UDP bomb or UDP packet storm.
CVE-1999-1491High· 7.2PoCabuse.console in Red Hat 2.1 uses relative pathnames to find and execute the undrv program, which allows local users to execute arbitrary commands via a path that points to a Trojan horse program.
abuse.console in Red Hat 2.1 uses relative pathnames to find and execute the undrv program, which allows local users to execute arbitrary commands via a path that points to a Trojan horse program.
CVE-1999-0208Critical· 10.0PoCrpc.ypupdated (NIS) allows remote users to execute arbitrary commands.
rpc.ypupdated (NIS) allows remote users to execute arbitrary commands.
CVE-1999-0066Critical· 9.8PoCAnyForm CGI remote execution.
AnyForm CGI remote execution.
CVE-1999-1243Medium· 4.6PoCSGI Desktop Permissions Tool in IRIX 6.0.1 and earlier allows local users to modify permissions for arbitrary files and gain privileges.
SGI Desktop Permissions Tool in IRIX 6.0.1 and earlier allows local users to modify permissions for arbitrary files and gain privileges.
CVE-1999-0235Critical· 10.0PoCBuffer overflow in NCSA WebServer (1.4.1 and below) gives remote access.
Buffer overflow in NCSA WebServer (1.4.1 and below) gives remote access.
CVE-1999-0077Medium· 5.0PoCPredictable TCP sequence numbers allow spoofing.
Predictable TCP sequence numbers allow spoofing.
CVE-2000-0508Medium· 5.0PoCrpc.lockd in Red Hat Linux 6.1 and 6.2 allows remote attackers to cause a denial of service via a malformed request.
rpc.lockd in Red Hat Linux 6.1 and 6.2 allows remote attackers to cause a denial of service via a malformed request.
CVE-1999-1022Medium· 6.2PoCserial_ports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execute the ls program, which allows local users to gain root privileges via a Trojan horse ls program.
serial_ports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execute the ls program, which allows local users to gain root privileges via a Trojan horse ls program.
CVE-1999-1219High· 7.2PoCVulnerability in sgihelp in the SGI help system and print manager in IRIX 5.2 and earlier allows local users to gain root privileges, possibly through the clogin command.
Vulnerability in sgihelp in the SGI help system and print manager in IRIX 5.2 and earlier allows local users to gain root privileges, possibly through the clogin command.
CVE-1999-1494Low· 2.1PoCcolorview in Silicon Graphics IRIX 5.1, 5.2, and 6.0 allows local attackers to read arbitrary files via the -text argument.
colorview in Silicon Graphics IRIX 5.1, 5.2, and 6.0 allows local attackers to read arbitrary files via the -text argument.
CVE-1999-0207High· 7.5PoCRemote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command.
Remote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command.
CVE-1999-0113Critical· 10.0PoCSome implementations of rlogin allow root access if given a -froot parameter.
Some implementations of rlogin allow root access if given a -froot parameter.
CVE-1999-1123High· 7.2PoCThe installation of Sun Source (sunsrc) tapes allows local users to gain root privileges via setuid root programs (1) makeinstall or (2) winstall.
The installation of Sun Source (sunsrc) tapes allows local users to gain root privileges via setuid root programs (1) makeinstall or (2) winstall.