CVE-2005-0685

Multiple access validation errors in OutStart Participate Enterprise PE allow remote attackers to 1 browse arbitrary directory trees by modifying the rootFolder parameter to displaynavigator.jsp, 2 rename arbitrary directory objects by modifying the selectedObject parameter to renamepopup.jsp, 3...

CVE-2005-0685

Multiple access validation errors in OutStart Participate Enterprise PE allow remote attackers to 1 browse arbitrary directory trees by modifying the rootFolder parameter to displaynavigator.jsp, 2 rename arbitrary directory objects by modifying the selectedObject parameter to renamepopup.jsp, 3...

CVE-2005-0685

CVE-2005-0685 : Multiple access validation errors in OutStart Participate Enterprise (PE) allow remote attackers to perform unauthorized actions by manipulating parameters such as rootFolder, selectedObject, and selectedObjectsCSV across various views/commands (displaynavigator.jsp, renamepopup.j...

CVE-2005-0685: Undefined Security Weakness

Multiple access validation errors in OutStart Participate Enterprise PE allow remote attackers to 1 browse arbitrary directory trees by modifying the rootFolder parameter to displaynavigator.jsp, 2 rename arbitrary directory objects by modifying the selectedObject parameter to renamepopup.jsp, 3...

CVE-2004-1124

CVE-2004-1124 describes a local privilege/escape issue in SCO UnixWare 7.1.1–7.1.4 where the chroot jail can be broken, enabling local users to escape and perform unauthorized actions. The vulnerability affects specific binaries listed by SCO (e.g., /etc/conf/pack.d/namefs/Driver_atup.o, Driver_m...

CVE-2004-2611

The Change Permissions function in the Sophster suite before 0.9.6 28 May 2004 aka 0.9.6-r5, possibly including Sophster, FreeSophster, and FreeSophsterPAM, removes the 1 setuid, 2 setgid, and 3 sticky bits when changing a file, which might allow attackers to gain privileges or conduct other...

CVE-2004-0274

Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STATOFFERED status to a bot that is not a sharebot, which allows remote attackers to use STATOFFERED to promote a bot to a sharebot and conduct unauthorized activities...

CVE-2004-0917: Undefined Security Weakness

The default installation of Vignette Application Portal installs the diagnostic utility without authentication requirements, which allows remote attackers to gain sensitive information, such as server and OS version, and conduct unauthorized activities via an HTTP request to /diag...

CVE-2004-1001

Unknown vulnerability in the passwdcheck function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pamchauthtok function call is not properly handled...

CVE-2004-1001

CVE-2004-1001 affects Shadow’s passwd_check in version 4.0.4.1 (and possibly earlier than 4.0.5). A local user can perform unauthorized activities when an error from pam_chauthtok is not properly handled. The issue is local in scope with partial confidentiality/integrity/availability impact as pe...

CVE-2004-1001: Undefined Security Weakness

Unknown vulnerability in the passwdcheck function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pamchauthtok function call is not properly handled...

CVE-2004-0835

MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities...

CVE-2004-0957

CVE-2004-0957 affects MySQL up to version 3.23.58 and earlier. A local user with privileges on a database whose name contains an underscore could grant privileges to other databases with similar names, enabling unauthorized activities. Connected advisories (e.g., SLES9, Ubuntu USN-32-1) show this...

CVE-2004-0835

CVE-2004-0835 affects MySQL 3.x up to 3.23.59, 4.x up to 4.0.19, 4.1.x up to 4.1.2, and 5.x up to 5.0.1. The vulnerability arises during ALTER TABLE RENAME, where the system checks the CREATE/INSERT rights of the original table instead of the target, potentially enabling unauthorized activities. ...

CVE-2004-0835: Undefined Security Weakness

MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities...

CVE-2004-0870

KDE Konqueror does not prevent cookies that are sent over an insecure channel HTTP from also being sent over a secure channel HTTPS/SSL in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."...

CVE-2004-0274

Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STATOFFERED status to a bot that is not a sharebot, which allows remote attackers to use STATOFFERED to promote a bot to a sharebot and conduct unauthorized activities...

CVE-2000-0894

HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooting, which allows attackers to cause a denial of service or conduct unauthorized activities...

CVE-2002-1517

The vulnerability CVE-2002-1517 affects IRIX 6.5: the fsr_efs component allows local users to perform unauthorized file activities via a symlink attack, possibly involving the .fsrlast file. The affected component is fsr_efs in IRIX 6.5, with a local attack vector and partial impacts to confident...

CVE-2004-0274

The vulnerability CVE-2004-0274 affects Eggdrops Eggheads bot, specifically Share.mod. It arises when the Share.mod component can mistakenly assign STAT_OFFERED to a bot that is not a sharebot, enabling remote attackers to promote a non-sharebot into a sharebot and perform unauthorized activities...