147 matches found
CVE-2003-1139
Musicqueue 1.2.0 allows local users to overwrite arbitrary files by triggering a segmentation fault and using a symlink attack on the resulting musicqueue.crash file...
CVE-2001-1139
Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. dot dot in the server request...
CVE-2001-1139
The CVE-2001-1139 entry concerns a Directory traversal vulnerability in ASCII NT WinWrapper Professional. The underlying issue allows an attacker to read arbitrary files by injecting a .. in the server request, indicating a path traversal flaw in the software’s handling of input paths. Public det...
CVE-1999-1139
CVE-1999-1139 describes a local privilege escalation in HP-UX 11.0 and earlier via a symlink attack on IOERROR.mytty, allowing local users to overwrite arbitrary files and gain root privileges. Affected component is HP-UX system tooling related to Character-Terminal User Environment (CUE). The co...
CVE-1999-1139
Character-Terminal User Environment CUE in HP-UX 11.0 and earlier allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the IOERROR.mytty file...
CVE-2000-1139
The CVE-2000-1139 entry concerns Microsoft Exchange 2000 prior to Rev. A, where installation creates a user account with a known password. This enables potential privilege elevation (privileges granted to the created account) as described in the description. The NVD metrics assign a CVSSv2 base s...