Cluster 06: VEN-others

• To: cve-review@linus.mitre.org
• Subject: Cluster 06: VEN-others
• From: "Steven M. Christey" <coley@linus.mitre.org>
• Date: Thu, 17 Jun 1999 15:10:46 -0400 (EDT)

This cluster has 2 vulnerabilities.

------------------------------------------
Candidate: CAN-1999-0358
Proposer: 001
Assigned: 19990617
Announced: 19990617
Category: SF
Reference: BUGTRAQ:Jan29,1999
Reference: COMPAQ:SSRT0583U

Digital Unix 4.0 has a buffer overflow in the inc program of the mh
package.

------------------------------------------
Candidate: CAN-1999-0433
Proposer: 001
Assigned: 19990617
Announced: 19990617
Category: SF
Reference: SUSE:Mar28,1999
Reference: BUGTRAQ:Mar21,1999

XFree86 startx command is vulnerable to a symlink attack, allowing local
users to create files in restricted directories, possibly allowing
them to gain privileges or cause a denial of service.

• Follow-Ups:
  • Re: Cluster 06: VEN-others
    • From: Adam Shostack <adam@netect.com>

• Prev by Date: Cluster 05: VEN-SGI
• Next by Date: Cluster 07: VEN-ROUTER
• Prev by thread: Re: Cluster 05: VEN-SGI
• Next by thread: Re: Cluster 06: VEN-others
• Index(es):
  • Date
  • Thread