647 matches found
CVE-2005-2709: Undefined Security Weakness
The sysctl functionality sysctl.c in Linux kernel before 2.6.14.1 allows local users to cause a denial of service kernel oops and possibly execute code by opening an interface file in /proc/sys/net/ipv4/conf/, waiting until the interface is unregistered, then obtaining and modifying function...
CVE-2004-2353: Undefined Security Weakness
BugPort before 1.099 stores its configuration file conf/config.conf under the web document root with a file extension that is not normally parsed by web servers, which allows remote attackers to obtain sensitive information...
security flaw
KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged file descriptor for a domain socket, which allows local users to read and write to /etc/hosts and /etc/resolv.conf and gain control over DNS name resolution by opening a number of...
CVE-2004-1107
dispatch-conf in Portage 2.0.51-r2 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...
PT-2004-3049 · Apple +1 · Cups +1
Name of the Vulnerable Software and Affected Versions: CUPS versions prior to 1.1.21rc1 Description: The issue allows attackers to bypass intended Access Control Lists ACLs due to the case-sensitive treatment of a Location directive in cupsd.conf. This can be exploited via a printer name containi...
CVE-2004-1107: Undefined Security Weakness
dispatch-conf in Portage 2.0.51-r2 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...
