CVE-2004-1276

IglooFTP 0.6.1, when recursively uploading a directory, allows local users to overwrite the files that are being uploaded by creating temporary files with names generated by the tmpnam function, before the files are opened by IglooFTP...

CVE-2004-1276

IglooFTP 0.6.1 is affected by a local vulnerability when recursively uploading a directory: a race condition allows local users to overwrite the files being uploaded by creating temporary files with names generated by tmpnam before the destination files are opened. This is caused by the use of tm...

CVE-2003-1276

Netfone.exe of NetTelephone 3.5.6 uses weak encryption for user PIN's and stores user account numbers in plaintext in the HKEYCURRENTUSER\Software\MediaRing.com\SDK\NetTelephone\settings registry key, which could allow local users to gain unauthorized access to NetTelephone accounts...

CVE-2002-1276

An incomplete fix for a cross-site scripting XSS vulnerability in SquirrelMail 1.2.8 calls the striptags function on the PHPSELF value but does not save the result back to that variable, leaving it open to cross-site scripting attacks...

CVE-2002-1276

CVE-2002-1276 concerns SquirrelMail XSS due to an incomplete fix in version 1.2.8 where strip_tags is applied to PHP_SELF but not saved back, leaving room for injection. OpenVAS notes the read_body.php path (SquirrelMail 1.2.9/1.2.10) as vulnerable to multiple parameter XSS. Debian security advis...

CVE-2001-1276

ispell before 3.1.20 allows local users to overwrite files of other users via a symlink attack on a temporary file...

CVE-2001-1276

The CVE-2001-1276 vulnerability affects ispell prior to 3.1.20. A local user can exploit a race condition by symlinking a temporary file used by ispell, allowing overwrite of another user’s files. Root cause: ispell used mktemp() for temp files; patches switch to mkstemp() and revise input handli...

CVE-1999-1276

fte-console in the fte package before 0.46b-4.1 does not drop root privileges, which allows local users to gain root access via the virtual console device...

CVE-1999-1276

The CVE-1999-1276 entry describes a local privilege escalation in fte-console: before 0.46b-4.1 it does not drop root privileges, allowing local users to gain root via the virtual console device. Affected: fte-package fte-console. Impact per CVSS: complete impact to confidentiality, integrity, an...

CVE-1999-1276

fte-console in the fte package before 0.46b-4.1 does not drop root privileges, which allows local users to gain root access via the virtual console device...