CVE-2001-0407

CVE-2001-0407 affects MySQL prior to 3.23.36. The vulnerability is a directory traversal in which a database name starting with .. can be created by a local user, enabling modification of arbitrary files and privilege escalation. The underlying issue is the handling of dot-dot sequences in databa...

CVE-2000-0407

Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option...

CVE-2000-0407

The provided documents identify CVE-2000-0407 as a local-privilege escalation vulnerability in the Solaris netpr service caused by a buffer overflow via an excessively long -p option. The root cause is a buffer overflow in the netpr program. The materials do not specify affected product versions,...

CVE-1999-0407

CVE-1999-0407 affects Microsoft IIS 4.0. A default virtual directory /IISADMPWD contains files that can be used as proxies for brute-forcing credentials or identifying valid users. In Nessus data, these files (aexp2.htr, aexp2b.htr, aexp3.htr, aexp4.htr) can enable brute-force login attempts; one...