7251 matches found
CVE-2000-1101
Directory traversal vulnerability in Winsock FTPd WFTPD 3.00 and 2.41 with the "Restrict to home directory" option enabled allows local users to escape the home directory via a "/../" string, a variation of the .. dot dot attack...
J-Pilot Permissions Vulnerability
J-Pilot automatically creates a ".jpilot" directory in the user's home directory to store preferences and backed up PalmOS device data. The permissions for this directory are mode 755, and files in the directory are mode 644; this allows anyone with only minimal access to the user's home director...
keware technologies homeseer 1.4 - Directory Traversal
source: https://www.securityfocus.com/bid/2085/info Keware Technologies HomeSeer is a home automation application which enables users to control various housewares and appliances locally or remotely via a web interface. It is possible for a remote user to gain access to any known file outside of...
CVE-2000-0794
Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long HOME variable to programs such as 1 gmemusage and 2 grosview...
CVE-2000-0433
The SuSE aaabase package installs some system accounts with home directories set to /tmp, which allows local users to gain privileges to those accounts by creating standard user startup scripts such as profiles...
CVE-2000-0433
CVE-2000-0433 affects the SuSE aaa_base package. The description states that it installs some system accounts with home directories set to /tmp, enabling local users to gain privileges by creating standard user startup scripts such as profiles. The CVSSv2 vector (LOCAL, LOW complexity, NONE authe...
CVE-2000-0230
Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable...
CVE-2000-0433
The SuSE aaabase package installs some system accounts with home directories set to /tmp, which allows local users to gain privileges to those accounts by creating standard user startup scripts such as profiles...
Большие проблемы с fingerd в IRIX
fingerd работает с привилегиями root и при этом следует символьным линком при чтении .plan в домашнем каталоге пользователя, что позволяет пользователю прочитать любой файл...
CVE-1999-0782
KDE kppp allows local users to create a directory in an arbitrary location via the HOME environmental variable...
CVE-1999-0906
Buffer overflow in sccw allows local users to gain root access via the HOME environmental variable...
CVE-1999-0906
The CVE-1999-0906 entry describes a local buffer overflow in sccw that allows escalation to root via the HOME environment variable. The connected KITPLOIT reference mentions an attack example and lists CVE-1999-0906, but none of the provided documents specify the affected product/vendor/version, ...
CVE-2000-0230
Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable...
Halloween Linux 4.0 RedHat Linux 6.16.2 - imwheel (1)
Halloween Linux 4.0 RedHat Linux 6.16.2 - imwheel 1 // source: https://www.securityfocus.com/bid/1060/info A vulnerability exists in the 'imwheel' package for Linux. This package is known to be vulnerable to a buffer overrun in its handling of the HOME environment variable. By supplying a...
CVE-2000-0054
The CVE-2000-0054 entry describes a directory traversal vulnerability in the CGI script search.cgi of the SolutionScripts Home Free package. An unauthenticated remote attacker can use .. sequences in the letter parameter to read arbitrary files from the affected web server, subject to the server ...
CVE-1999-0863
CVE-1999-0863 concerns a buffer overflow in FreeBSD seyon. The vulnerability can be triggered via the HOME environment variable, the -emulator argument, the -modems argument, or the GUI, indicating an input-handling overflow in the SeYON component. Affected status/versions are not fully specified...
Solution Scripts Home Free 1.0 - 'search.cgi' Directory Traversal
source: https://www.securityfocus.com/bid/921/info Home Free is a suite of Perl cgi scripts that allow a website to support user contributions of various types. One of the scripts, search.cgi, accepts a parameter called letter which can be any text string. The supplied argument can contain the...
Solution Scripts Home Free 1.0 - search.cgi Directory Traversal
Solution Scripts Home Free 1.0 - search.cgi Directory Traversal source: https://www.securityfocus.com/bid/921/info Home Free is a suite of Perl cgi scripts that allow a website to support user contributions of various types. One of the scripts, search.cgi, accepts a parameter called letter which...
CVE-1999-0201
CVE-1999-0201 describes an information-disclosure vulnerability in FTP servers where issuing a CWD (quote CWD) command can reveal the full path of the ftp user’s home directory. The vulnerability is linked to ftpd-style servers; the underlying issue is that the CWD response exposes filesystem pat...