123 matches found
CVE-2001-0300
The CVE-2001-0300 issue pertains to the Oracle Internet Directory LDAP Daemon (oidldapd) version 2.1.1.1 included with Oracle 8i/8.1.7. The daemon writes logs to a directory (ldaplog) that has world‑writable permissions, enabling a local user to delete logs and, via a symlink attack, overwrite ot...
CVE-2000-0300
The CVE refers to PcAnywhere 9.x where the default encryption method is weak, enabling remote attackers to sniff and decrypt PcAnywhere or NT domain accounts. Affected software: PcAnywhere 9.x (default encryption). Root cause: use of weak default encryption in the authentication pathway. Impact: ...
CVE-1999-0300
CVE-1999-0300 concerns nis_cachemgr for Solaris NIS+ that allows attackers to add malicious NIS+ servers. Root cause: untrusted server addition in NIS+; impact includes partial confidentiality, integrity, and availability. CVSS 2.0 base 7.5. No patch details in provided documents.