OSVDB: Open Sourced Vulnerability Database

Browse Database

Browsing Vulnerabilities Disclosed in January of 1990

OSVDB ID	Disclosure Date	Title
8745 [CLOSE] OSVDB ID : 8745 - Disclosed: 1990-01-29 Description: (Description Provided by CVE) : Vulnerability in SMI Sendmail 4.0 and earlier, on SunOS up to 4.0.3, allows remote attackers to access user bin.	1990-01-29	SunOS SMI Sendmail Remote bin Access
57724 [CLOSE] OSVDB ID : 57724 - Disclosed: 1990-01-25 Description: Unknown / Incomplete	1990-01-25	SunOS 4/60 Default Install Multiple Unpassworded Accounts
124 [CLOSE] OSVDB ID : 124 - Disclosed: 1990-01-01 Description: (Description Provided by CVE) : REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "A component service related to NIS is running."	1990-01-01	Multiple Unix NIS YP Server Remote Information Disclosure
123 [CLOSE] OSVDB ID : 123 - Disclosed: 1990-01-01 Description: (Description Provided by CVE) : The netstat service is running, which provides sensitive information to remote attackers.	1990-01-01	Multiple Unix Netstat Service Remote Information Disclosure
207 [CLOSE] OSVDB ID : 207 - Disclosed: 1990-01-01 Description: (Description Provided by CVE) : A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers.	1990-01-01	Multiple Mail Server Intentional Mail Relay
70 [CLOSE] OSVDB ID : 70 - Disclosed: 1990-01-01 Description: (Description Provided by CVE) : A service or application has a backdoor password that was placed there by the developer.	1990-01-01	Multiple Linux FTP Default Login
193 [CLOSE] OSVDB ID : 193 - Disclosed: 1990-01-01 Description: This host is running the 'rsh' service. This service provides the ability to run arbitrary commands on the host using normal 'r' utility authentication. Usernames and passwords are passed across the network in plaintext. An attacker can possibly sniff usernames and passwords and gain access to this host. This vulnerability may be a false positive on hosts protected by certain application-level firewalls or the firewalls themselves such as a Raptor Firewall or TIS Firewall Toolkit. On these systems a connection is not refused, but is established and then immediately closed.	1990-01-01	Multiple Unix 'r' Services Weak Authentication
286 [CLOSE] OSVDB ID : 286 - Disclosed: 1990-01-01 Description: Devices without proper physical security may allow a malicious user to bypass authentication or even lead to an unauthorized information disclosure. The issue may be triggered in a variety of different ways and typically depends on the specific device. It is possible that the flaw will result in a loss of integrity.	1990-01-01	Unrestricted Physical Access Authentication Bypass / Information Disclosure
309 [CLOSE] OSVDB ID : 309 - Disclosed: 1990-01-01 Description: (Description Provided by CVE) : An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server.	1990-01-01	Multiple Vendor X Server Unauthenticated Access
492 [CLOSE] OSVDB ID : 492 - Disclosed: 1990-01-01 Description: DNS contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when the host's DNS name server allows zone transfers to replicate zone information between master and slave DNS servers. If zone transfers have not been restricted to authorized slave servers only, a remote attacker could disclose sensitive network information resulting in a loss of confidentiality.	1990-01-01	DNS Zone Transfer Information Disclosure
529 [CLOSE] OSVDB ID : 529 - Disclosed: 1990-01-01 Description: Unknown / Incomplete	1990-01-01	Multiple Vendor ICMP Ping Saturation DoS (ping flood)
856 [CLOSE] OSVDB ID : 856 - Disclosed: 1990-01-01 Description: (Description Provided by CVE) : A version of rusers is running that exposes valid user information to any entity on the network.	1990-01-01	RPC rusers Remote Information Disclosure
5684 [CLOSE] OSVDB ID : 5684 - Disclosed: 1990-01-01 Description: Iniquity BBS contains a flaw that may allow an unprivileged user to download arbitrary files. The issue is due to the Sysop line chat allowing system commands to be executed from either side of the chat. If a user initiates a file transfer from the chat, they may download any file on the host system.	1990-01-01	Iniquity BBS Line Chat Arbitrary File Access
7759 [CLOSE] OSVDB ID : 7759 - Disclosed: 1990-01-01 Description: By default, Major BBS running the Mutant Link module installs with a default password. The "ML" account has a password of "!@*&#@&AY" which is publicly known and documented. This allows attackers to trivially access the program or system.	1990-01-01	Major BBS Mutant Link Default Account

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.