Sambar Server 4.2 Beta 7 - Batch CGI

source: https://www.securityfocus.com/bid/1002/info The Sambar Web/FTP/Proxy Server for Windows NT and 2000 supports DOS-style batch programs as CGI scripts. A remote attacker can use any batch file used by the server in the 'cgi-bin' directory to run any valid command-line program with...

CVE-2000-0154

The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack...

CVE-2000-0067

The CVE refers to CyberCash Merchant Connection Kit (MCK). Affected component: MCK. Vulnerability: local users can modify files via a symlink attack (symlink race condition) as described in CVE-2000-0067. The PT-2000-1059 entry confirms the issue is related to local access and notes that affected...

CVE-1999-0663

A system-critical program, library, or file has a checksum or other integrity measurement that indicates that it has been modified...

CVE-1999-0663

Technical details about CVE-1999-0663 are not publicly available in the provided documents. No affected products, versions, root cause, or fixes are disclosed here. Monitor for updates.

CVE-1999-0086

Technical details are not publicly available in the provided connected documents. Monitor for updates on affected products, versions, root cause, and fixes.

CVE-1999-0857

FreeBSD gdc program allows local users to modify files via a symlink attack...

CVE-1999-0850

The default permissions for Endymion MailMan allow local users to read email or modify files...

CVE-2000-0067

CyberCash Merchant Connection Kit MCK allows local users to modify files via a symlink attack...

CVE-1999-0857

CVE-1999-0857 affects the FreeBSD gdc program, where local users can modify files via a symlink attack. The vulnerability stems from a symlink-related flaw allowing local privilege impact (integrity partially). The NVD entry lists a LOW 2.1 base score with local attack vector and no explicit expl...

CVE-2000-0121

The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka the "Recycle Bin Creation" vulnerability...

CVE-2000-0107

Linux apcd program allows local attackers to modify arbitrary files via a symlink attack...

CVE-2000-0067

CyberCash Merchant Connection Kit MCK allows local users to modify files via a symlink attack...

CVE-1999-0761

Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program...

CVE-1999-0765

SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor...

CVE-1999-0965

CVE-1999-0965 is a race condition in xterm that allows local users to modify arbitrary files via the logging option. The vulnerability is documented across multiple sources (NVD, RH, MSRC, cve.org) as a local-privilege impact tied to xterm’s logging feature. Root cause stated as a race condition;...

CVE-1999-0761

The vulnerability CVE-1999-0761 is a buffer overflow in the FreeBSD fts library routines that allows a local user to modify arbitrary files via the periodic program. Connected documents (e.g., Red Hat CVE entry and NVD) corroborate the affected component as the FreeBSD fts library, with the root ...

CVE-1999-0857

FreeBSD gdc program allows local users to modify files via a symlink attack...

CVE-1999-1549

Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "secure" hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's configuration file and execute commands...

CVE-1999-0442

This CVE refers to Solaris ff.core, where local users can modify files. The connected documents corroborate the same description across Red Hat, CVE listing, EUVD, and NVD entries, but do not provide concrete technical details such as affected versions, root cause, exploit method, or recommended ...