CVE-2003-0424

Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to obtain the source code for scripts by appending encoded space %20 or . %2e characters to an HTTP request for the script, e.g. viewbroadcast.cgi...

CVE-2003-0424

Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to obtain the source code for scripts by appending encoded space %20 or . %2e characters to an HTTP request for the script, e.g. viewbroadcast.cgi...

CVE-2003-0424

The CVE-2003-0424 entry affects Apple QuickTime/Darwin Streaming Server prior to 4.1.3f. The vulnerability allows an attacker to disclose script source code by appending encoded characters (%20 space or %2e dot) to an HTTP request for a script (e.g., /view_broadcast.cgi). The issue is a Script So...

CVE-2002-0424

efingerd 1.61 and earlier, when configured without the -u option, executes .efingerd files as the efingerd user typically "nobody", which allows local users to gain privileges as the efingerd user by modifying their own .efingerd file and running finger...

CVE-2002-0424

CVE-2002-0424 affects efingerd 1.61 and earlier. When configured without the -u option, efingerd executes user-owned .efingerd files as the efingerd user (typically "nobody"), allowing a local user to gain privileges by modifying their own .efingerd file and invoking finger. The connected documen...

CVE-2002-0424

efingerd 1.61 and earlier, when configured without the -u option, executes .efingerd files as the efingerd user typically "nobody", which allows local users to gain privileges as the efingerd user by modifying their own .efingerd file and running finger...

CVE-2001-0424

BubbleMon 1.31 does not properly drop group privileges before executing programs, which allows local users to execute arbitrary commands with the kmem group id...

CVE-2001-0424

BubbleMon 1.31 does not properly drop group privileges before executing programs, which allows local users to execute arbitrary commands with the kmem group id...

CVE-2001-0424

Summary: CVE-2001-0424 affects BubbleMon 1.31, where the process does not drop group privileges before executing programs. This results in a local privilege escalation where local users can run arbitrary commands with the kmem group id. Impact (as described in sources): Local users gain complete ...

CVE-2000-0424

The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-0424

The CVE-2000-0424 entry concerns the CGI Counter 4.0.7 (by George Burgyan) and describes remote command execution via shell metacharacters. The connected documents corroborate that the vulnerability arises from improper handling of shell metacharacters in the CGI Counter 4.0.7 interface, enabling...

CVE-2000-0424

The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters...

CVE-1999-0424

talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes...

CVE-1999-0424

The CVE-1999-0424 entry concerns Netscape 4.5’s talkback feature, allowing a local user to overwrite arbitrary files of another user when Netscape crashes. Affected software: Netscape 4.5; Vulnerable component/behavior: talkback causing local file overwrite after crash. Impact: partial confidenti...