CVE-2004-2190

CVE-2004-2190 is a directory traversal vulnerability affecting Unzoo 4.4-2. The available connected sources describe an input validation error during archive unpacking that can lead to files being overwritten outside the target directory. The NVD entry notes unknown impact/attack vectors, but oth...

CVE-2004-2190

Directory traversal vulnerability in Unzoo 4.4-2 has unknown impact and attack vectors...

CVE-2001-1416

The CVE-2001-1416 entry concerns multiple cross-site scripting (XSS) vulnerabilities in the log messages of certain Alpha versions of AOL Instant Messenger (AIM) 4.4. The vulnerability allows remote attackers to execute arbitrary web script or HTML via an image in the (1) DATA, (2) STYLE, or (3) ...

CVE-2002-1528

CVE-2002-1528 concerns the MondoSearch product where the msmmask.exe CGI can disclose script source via the mask parameter. The vulnerability affects MondoSearch 4.4 and older builds, enabling an attacker to read files from the webserver’s directories, which is an information disclosure issue. Op...

CVE-2001-1029

CVE-2001-1029 : In FreeBSD 4.4 and earlier, libutil in OpenSSH does not drop privileges before verifying capabilities for reading copyright and welcome files, allowing local users to bypass capability checks and read arbitrary files by specifying alternate files. The description provides the vuln...

CVE-2003-0277

Directory traversal vulnerability in normalhtml.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to read arbitrary files via .. dot dot sequences in the file parameter...

CVE-2002-1528

MsmMask.exe in MondoSearch 4.4 allows remote attackers to obtain the source code of scripts via the mask parameter...

CVE-2002-0754

Kerberos 5 su k5su in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges after it has dropped them...

CVE-2001-1185

CVE-2001-1185 affects FreeBSD 4.4. Some AIO operations may be delayed until after an execve call, allowing a local user to overwrite memory of the new process and gain privileges. The provided documents do not include exploitation details or remediation/fix information.

Security Advisory FreeBSD-SA-02:24.k5su

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:24.k5su Security Advisory The FreeBSD Project Topic: k5su utility does not honor wheel' group Category: kerberos5 Module: kerberos5/usr.bin/k5su Announced: 2002-05-20...

CVE-1999-1214

The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cause a denial of service by using certain ioctl and fcntl calls to cause the signal to be sent to an arbitrary process ID...

CVE-1999-1214

The CVE-1999-1214 issue affects the 4.4 BSD kernel’s asynchronous I/O facility. It does not validate credentials when setting the recipient of I/O notification, allowing a local user to trigger a signal to an arbitrary process ID via specific ioctl/fcntl calls, causing a denial of service. The do...

CVE-2001-0998

CVE-2001-0998 affects IBM HACMP 4.4. A completed TCP connection to HACMP ports (e.g., during a port scan) that sends no additional data can cause a failure in snmpd, yielding a denial-of-service condition. The available sources identify the affected product and the remote DoS impact but do not pr...

CVE-2001-1185

Some AIO operations in FreeBSD 4.4 may be delayed until after a call to execve, which could allow a local user to overwrite memory of the new process and gain privileges...

PT-2001-2176 · Freebsd +1 · Openssh +2

Name of the Vulnerable Software and Affected Versions: OpenSSH on FreeBSD versions 4.4 and earlier Description: The issue allows local users to bypass capabilities checks and read arbitrary files by specifying alternate copyright or welcome files, due to libutil in OpenSSH not dropping privileges...

CVE-2001-0383

CVE-2001-0383 affects PHP-Nuke up to version 4.4 and earlier. The banners.php Change operation can be invoked remotely without authentication, allowing modification of banner ad URLs. NVD lists a Network attack vector, low complexity, with no confidentiality impact, partial integrity impact, and ...

CVE-1999-1518

The CVE-1999-1518 entry describes that operating systems with BSD 4.4–style shared memory implementations allow a user to perform a denial-of-service and bypass memory limits by using mmap or shmget to allocate memory and trigger page faults. The impact stated is partial availability; no specific...

CVE-1999-1518

Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory limits e.g., as specified with rlimits using mmap or shmget to allocate memory and cause page faults...

CVE-1999-1394

BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable and append-only flags for files by unmounting the file system and using a file system editor such as fsdb to directly modify the file through a device...

CVE-2001-0320

CVE-2001-0320 affects PHP-Nuke 4.4. The flaw is in bb_smilies.php and bbcode_ref.php where a malformed username argument containing a null byte and ".." sequences can allow remote attackers to read arbitrary files and gain PHP administrator privileges. This is supported by the NVD entry and corro...