CVE List

Id CVE No. Status Description Phase Votes Comments Actions
926  CVE-1999-0946  Entry  Buffer overflow in Yamaha MidiPlug via a Text variable in an EMBED tag.        View
927  CVE-1999-0947  Entry  AN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote attackers to execute commands via shell metacharacters.        View
928  CVE-1999-0948  Candidate  Buffer overflow in uum program for Canna input system allows local users to gain root privileges.  Proposed (19991222)  ACCEPT(2) Levy, Stracener | MODIFY(1) Frech | NOOP(2) Baker, Christey  Christey> CVE-1999-0948 and CVE-1999-0949 are extremely similar. | uum (0948) is exploitable through a different set of options | than canuum (0949). If it"s the same generic option parsing | routine used by both programs, then CD:SF-CODEBASE says to | merge them. But if it"s not, then CD:SF-LOC and CD:SF-EXEC | says to split them. However, this is a prime example of | how SF-EXEC might be modified - uum and canuum are clearly | part of the same package, so in the absence of clear | information, maybe we should merge them. | Frech> XF:canna-uum-bo  View
929  CVE-1999-0949  Candidate  Buffer overflow in canuum program for Canna input system allows local users to gain root privileges.  Proposed (19991222)  ACCEPT(2) Levy, Stracener | MODIFY(1) Frech | NOOP(2) Baker, Christey  Christey> CVE-1999-0948 and CVE-1999-0949 are extremely similar. | uum (0948) is exploitable through a different set of options | than canuum (0949). If it"s the same generic option parsing | routine used by both programs, then CD:SF-CODEBASE says to | merge them. But if it"s not, then CD:SF-LOC and CD:SF-EXEC | says to split them. However, this is a prime example of | how SF-EXEC might be modified - uum and canuum are clearly | part of the same package, so in the absence of clear | information, maybe we should merge them. | | Also review BID:758 and BID:757 - may need to change the BID | here. | Frech> XF:canna-uum-bo | Christey> CHANGEREF BID:757 BID:758 | Christey> The following page says that canuum is a "Japanese input tty | frontend for Canna using uum," which suggests that it is, at | the least, a different package, so perhaps this should stay SPLIT. | | http://wuarchive.wustl.edu/mirrors/NetBSD/NetBSD-current/pkgsrc/inputmethod/canuum/README.html  View
930  CVE-1999-0950  Entry  Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories.        View

Page 186 of 20943, showing 5 records out of 104715 total, starting on record 926, ending on 930

Actions