Выполнение приложений через Microsoft Internet Explorer для Macintosh (code execution)

Можно выполнить служебный системный скрипт через META REFRESH. Или через файл с образом диска...

DoS против Irix через nsd (disk space filling)

Отсутствуют ограничения на размер дискового кэша, что может привести к исчерпанию дискового пространства в системном разделе...

IRIX nsd Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: IRIX nsd vulnerability Number: 20020102-02-I Date: January 15, 2002 SGI provides this information freely to the SGI user community for its consideration, interpretation, implementation and use. SGI recommends that this information be...

CVE-2001-1551

Linux kernel 2.2.19 enables CAPSYSRESOURCE for setuid processes, which allows local users to exceed disk quota restrictions during execution of setuid programs...

CVE-2001-1564

setrlimit in HP-UX 10.01, 10.10, 10.24, 10.20, 11.00, 11.04 and 11.11 does not properly enforce core file size on processes after setuid or setgid privileges are dropped, which could allow local users to cause a denial of service by exhausting available disk space...

Пароли в открытом тексте в ARCServe for NT (readable cleartext passwords)

На разделяемом диске находится файл с паролем в открытом виде...

CVE-1999-1429

CVE-1999-1429 affects the DIT TransferPro system, where the installer creates devices with world-readable and world-writable permissions. The vulnerable element is the ff device driver, and the described outcome is that local users could damage disks due to improper permissions. The provided mate...

CVE-1999-1526

Auto-update feature of Macromedia Shockwave 7 transmits a user's password and hard disk information back to Macromedia...

CVE-1999-1443: Undefined Security Weakness

Micah Software Full Armor Network Configurator and Zero Administration allow local users with physical access to bypass the desktop protection by 1 using and kill the process using the task manager, 2 booting the system from a separate disk, or 3 interrupting certain processes that execute while...

CVE-1999-1526: Undefined Security Weakness

Auto-update feature of Macromedia Shockwave 7 transmits a user's password and hard disk information back to Macromedia...

CVE-1999-1429: Undefined Security Weakness

DIT TransferPro installs devices with world-readable and world-writable permissions, which could allow local users to damage disks through the ff device driver...

CVE-2001-0624

CVE-2001-0624 affects QNX 2.4. A local user can read arbitrary files by directly accessing the FAT disk partition mount point, e.g., /fs-dos. The root cause is an unprotected mount point that exposes file contents to a local user. The impact is partial confidentiality of files. No remediation or ...

CVE-2001-0624

QNX 2.4 allows a local user to read arbitrary files by directly accessing the mount point for the FAT disk partition, e.g. /fs-dos...

MAILsweeper SMTP 4.2.1 + F-Secure Anti-Virus 5.0.2/5.2.1 - File Scanner Malicious Archive Denial of Service

source: https://www.securityfocus.com/bid/3027/info A wide range of products exists for scanning enterprise email and filesystems for files containing viruses and other undesirable content. These products handle compressed files by temporarily unzipping them and scanning their uncompressed...

MAILsweeper SMTP 4.2.1 + F-Secure Anti-Virus 5.0.25.2.1 - File Scanner Malicious Archive Denial of Service

MAILsweeper SMTP 4.2.1 + F-Secure Anti-Virus 5.0.25.2.1 - File Scanner Malicious Archive Denial of Service source: https://www.securityfocus.com/bid/3027/info A wide range of products exists for scanning enterprise email and filesystems for files containing viruses and other undesirable content...

CVE-2001-0421

FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by providing a valid username with an invalid password followed by a CWD command, which could release sensitive information such as shadowed...

CVE-2001-0421: Undefined Security Weakness

FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by providing a valid username with an invalid password followed by a CWD command, which could release sensitive information such as shadowed...

Дырка в Lotus Web Server

Исопльзуя URL типа http://TARGETDOMINO/.nsf/../winnt/win.ini можно получить доступ к любому файлу на диске...

CVE-2000-0459

IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of service by filling up the disk space by requesting a large number of documents and prematurely stopping the request...

CVE-2000-0459: Undefined Security Weakness

IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of service by filling up the disk space by requesting a large number of documents and prematurely stopping the request...