Re: Cluster 06: VEN-others

• To: "Steven M. Christey" <coley@linus.mitre.org>, cve-review@linus.mitre.org
• Subject: Re: Cluster 06: VEN-others
• From: Adam Shostack <adam@netect.com>
• Date: Fri, 18 Jun 1999 09:37:21 -0400
• In-Reply-To: <199906171910.PAA16468@basie.mitre.org>; from Steven M. Christey on Thu, Jun 17, 1999 at 03:10:46PM -0400
• References: <199906171910.PAA16468@basie.mitre.org>
• Reply-To: adam@netect.com

ACCEPT both

On Thu, Jun 17, 1999 at 03:10:46PM -0400, Steven M. Christey wrote:
| 
| This cluster has 2 vulnerabilities.
| 
| ------------------------------------------
| Candidate: CAN-1999-0358
| Proposer: 001
| Assigned: 19990617
| Announced: 19990617
| Category: SF
| Reference: BUGTRAQ:Jan29,1999
| Reference: COMPAQ:SSRT0583U
| 
| Digital Unix 4.0 has a buffer overflow in the inc program of the mh
| package.
| 
| ------------------------------------------
| Candidate: CAN-1999-0433
| Proposer: 001
| Assigned: 19990617
| Announced: 19990617
| Category: SF
| Reference: SUSE:Mar28,1999
| Reference: BUGTRAQ:Mar21,1999
| 
| XFree86 startx command is vulnerable to a symlink attack, allowing local
| users to create files in restricted directories, possibly allowing
| them to gain privileges or cause a denial of service.

• References:
  • Cluster 06: VEN-others
    • From: "Steven M. Christey" <coley@linus.mitre.org>

• Prev by Date: Re: Cluster 05: VEN-SGI
• Next by Date: Re: Cluster 02: VEN-AIX
• Prev by thread: Cluster 06: VEN-others
• Next by thread: RE: Cluster 06: VEN-others
• Index(es):
  • Date
  • Thread