CVE-2001-1015

The CVE refers to a buffer overflow in Snes9x 1.37 when installed setuid root, allowing local users to gain root privileges via a long command line argument. Affected software: Snes9x 1.37. Root cause: buffer overflow triggered by oversized command line argument in a setuid context. Impact: local...

CVE-1999-1165

GNU fingerd 1.37 is affected. The flaw is failure to drop privileges before accessing user information, enabling local attackers to (1) gain root via a malicious .fingerrc and (2) read arbitrary files via .plan/.forward/.project symbolic links. No patch/version or remediation is specified in the ...