Caldera Openlinux vulnerabilities

CVE-2002-1199 [MEDIUM] CVE-2002-1199: The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to r The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments.

CVE-1999-0104 [MEDIUM] CVE-1999-0104: A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2. A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2.

CVE-2000-0369 [MEDIUM] CVE-2000-0369: The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, which allows The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, which allows remote attackers to cause a denial of service.

CVE-1999-0880 [MEDIUM] CVE-1999-0880: Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly. Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly.

CVE-2000-0566 [HIGH] CVE-2000-0566: makewhatis in Linux man package allows local users to overwrite files via a symlink attack. makewhatis in Linux man package allows local users to overwrite files via a symlink attack.

CVE-1999-1288 [MEDIUM] CVE-1999-1288: Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incor Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions including the setgid bit, which allows local users to read and write files and possibly gain privileges via bugs in the program.

CVE-1999-0731 [MEDIUM] CVE-1999-0731: The KDE klock program allows local users to unlock a session using malformed input. The KDE klock program allows local users to unlock a session using malformed input.

CVE-1999-0712 [LOW] CVE-1999-0712: A vulnerability in Caldera Open Administration System (COAS) allows the /etc/shadow password file to A vulnerability in Caldera Open Administration System (COAS) allows the /etc/shadow password file to be made world-readable.