Due to insecure creation of configuration files via KApplication-class, local users can create arbitrary files when running setuid root KDE programs

Overview KApplication-class, a class used to create KDE applications, creates configuration files without checking for proper ownership or prior existence. Description KApplication-class, a class used to create KDE applications, creates configuration files. These files are created in a local...

NetcPlus SmartServer3 3.75 - Weak Encryption

NetcPlus SmartServer3 3.75 - Weak Encryption / source: https://www.securityfocus.com/bid/1962/info SmartServer3 is an email server designed for small networks. A design error exists in SmartServer3 which enables an authenticated user to view other users login information and possibly gain access ...

CVE-2000-0602

Secure Locate slocate in Red Hat Linux allows local users to gain privileges via a malformed configuration file that is specified in the LOCATEPATH environmental variable...

CVE-1999-1229

Quake 2 server 3.13 on Linux does not properly check file permissions for the config.cfg configuration file, which allows local users to read arbitrary files via a symlink from config.cfg to the target file...