107 matches found
CVE-2003-0537
The CVE-2003-0537 entry affects liece, the Emacs IRC client, where the affected versions up to 2.0+0.20030527 create temporary files insecurely. This behavior could allow a local attacker to overwrite arbitrary files as the running user. The provided documents specify the vulnerability as insecur...
CVE-2002-0537
The admin.html file in StepWeb Search Engine SWS 2.5 stores passwords in links to manager.pl, which allows remote attackers who can access the admin.html file to gain administrative privileges to SWS...
CVE-2002-0537
The CVE-2002-0537 entry concerns StepWeb Search Engine (SWS) 2.5 where passwords are stored in links to manager.pl within the admin.html page. This design allows remote attackers who can access admin.html to gain administrative privileges on SWS. The description in multiple sources confirms the v...
CVE-2001-0537
HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL...
CVE-2001-0537
HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL...
CVE-2000-0537
BRU backup software is affected. Local users can cause arbitrary data to be appended to files by supplying an alternate configuration file via the BRUEXECLOG environment variable. The description does not specify affected versions, root cause beyond environmental variable handling, or remediation...