11 results (0.003 seconds)

CVSS: 10.0EPSS: 2%CPEs: 42EXPL: 0

27 May 2016 — Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors. Vulnerabilidad de formato de cadena en libxml2 en versiones anteriores a 2.9.4 permite a atacantes tener un impacto no especificado a través de especificadores de formato de cadena en vectores desconocidos. It was discovered that libxml2 incorrectly handled format strings. If a user or automated system were tricked into opening a specially crafted document, an atta... • http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html • CWE-134: Use of Externally-Controlled Format String •

CVSS: 7.8EPSS: 0%CPEs: 24EXPL: 3

22 May 2000 — Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter. • https://www.exploit-db.com/exploits/19952 •

CVSS: 7.5EPSS: 4%CPEs: 11EXPL: 1

16 Aug 1999 — A default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to conduct a denial of service. • https://www.exploit-db.com/exploits/19463 •

CVSS: 7.8EPSS: 0%CPEs: 14EXPL: 1

21 Mar 1999 — XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service. • https://www.exploit-db.com/exploits/19257 •

CVSS: 10.0EPSS: 48%CPEs: 17EXPL: 2

09 Feb 1999 — Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto. • https://www.exploit-db.com/exploits/19086 •

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0

02 Jan 1999 — The default configuration of Slackware 3.4, and possibly other versions, includes . (dot, the current directory) in the PATH environmental variable, which could allow local users to create Trojan horse programs that are inadvertently executed by other users. • http://marc.info/?l=bugtraq&m=91540043023167&w=2 •

CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 1

13 Jul 1998 — login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, which prevents it from dropping privileges, causing it to assign root privileges to any local user who logs on to the server. • https://www.exploit-db.com/exploits/19122 •

CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 2

06 Apr 1998 — Slackware Linux 3.4 pkgtool allows local attacker to read and write to arbitrary files via a symlink attack on the reply file. • https://www.exploit-db.com/exploits/19074 •

CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 0

02 Feb 1998 — Vulnerability in imapd and ipop3d in Slackware 3.4 and 3.3 with shadowing enabled, and possibly other operating systems, allows remote attackers to cause a core dump via a short sequence of USER and PASS commands that do not provide valid usernames or passwords. • http://marc.info/?l=bugtraq&m=88637951600184&w=2 •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

01 Dec 1997 — Buffer overflow in Linux Slackware crond program allows local users to gain root access. • https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0340 •