CVE-1999-1490

CVE-1999-1490 affects xosview 1.5.1 in Red Hat 5.1. The issue is a local privilege escalation where an overly long HOME environmental variable enables a non-privileged user to gain root access. The root cause is not expanded in the provided documents beyond the environmental variable manipulation...

CVE-1999-1490: Undefined Security Weakness

xosview 1.5.1 in Red Hat 5.1 allows local users to gain root access via a long HOME environmental variable...

Sun Solaris dtsession buffer overflow

Heap overflow on HOME environment variable parsing...

CVE-2002-1427

The printhtmltofile function in edit.cgi for Easy Homepage Creator 1.0 does not check user credentials, which allows remote attackers to modify home pages of other users...

CVE-2002-1427: Undefined Security Weakness

The printhtmltofile function in edit.cgi for Easy Homepage Creator 1.0 does not check user credentials, which allows remote attackers to modify home pages of other users...

CVE-2003-0034

Buffer overflow in the mtink status monitor, as included in the printer-drivers package in Mandrake Linux, allows local users to execute arbitrary code via a long HOME environment variable...

CVE-2003-0034: Undefined Security Weakness

Buffer overflow in the mtink status monitor, as included in the printer-drivers package in Mandrake Linux, allows local users to execute arbitrary code via a long HOME environment variable...

CVE-2002-1863

Iomega Network Attached Storage NAS A300U, and possibly other models, does not allow the FTP service to be disabled, which allows local users to access home directories via FTP even when access to all shared directories have been disabled...

CVE-2002-1713

The Standard security setting for Mandrake-Security package msec in Mandrake 8.2 installs home directories with world-readable permissions, which could allow local users to read other user's files...

PT-2002-2435 · Mandrake · Mandrake

Name of the Vulnerable Software and Affected Versions: Mandrake versions 8.2 Description: The Standard security setting for the Mandrake-Security package installs home directories with world-readable permissions. This could allow local users to read other users' files. Recommendations: For Mandra...

CVE-2002-0143: Undefined Security Weakness

Buffer overflow in Eterm of Enlightenment Imlib2 1.0.4 and earlier allows local users to execute arbitrary code via a long HOME environment variable...

CVE-2002-0119

Alcatel Speed Touch Home ADSL Modem allows remote attackers to cause a denial of service reboot via a network scan with unusual packets, such as nmap with OS detection...

CVE-2002-0132

Buffer overflow in Chinput 3.0 allows local users to execute arbitrary code via a long HOME environment variable...

CVE-2002-0143

Buffer overflow in Eterm of Enlightenment Imlib2 1.0.4 and earlier allows local users to execute arbitrary code via a long HOME environment variable...

CVE-2002-0125

Buffer overflow in ClanLib library 0.5 may allow local users to execute arbitrary code in games that use the library, such as 1 Super Methane Brothers, 2 Star War, 3 Kwirk, 4 Clankanoid, and others, via a long HOME environment variable...

CVE-2002-0119

The CVE-2002-0119 entry concerns the Alcatel Speed Touch Home ADSL Modem. The vulnerability is triggered by remote network scanning using unusual packets (e.g., Nmap with OS detection), which leads to a denial of service (reboot). The NVD entry lists a network-based attack vector with low complex...

CVE-2002-0132: Undefined Security Weakness

Buffer overflow in Chinput 3.0 allows local users to execute arbitrary code via a long HOME environment variable...

CVE-2002-0125: Undefined Security Weakness

Buffer overflow in ClanLib library 0.5 may allow local users to execute arbitrary code in games that use the library, such as 1 Super Methane Brothers, 2 Star War, 3 Kwirk, 4 Clankanoid, and others, via a long HOME environment variable...

CVE-2002-0119: Undefined Security Weakness

Alcatel Speed Touch Home ADSL Modem allows remote attackers to cause a denial of service reboot via a network scan with unusual packets, such as nmap with OS detection...

CVE-1999-1385: Undefined Security Weakness

Buffer overflow in ppp program in FreeBSD 2.1 and earlier allows local users to gain privileges via a long HOME environment variable...