GDM symbolic links problem

.xsession-errors file in user's home is open with root permissions without checking for symlinks...

CVE-2003-0649

Buffer overflow in xpcd-svga for xpcd 2.08 and earlier allows local users to execute arbitrary code via a long HOME environment variable...

CVE-2003-0649

Affected product: xpcd (including xpcd-svga) prior to version 2.08. Root cause: buffer overflow in xpcd-svga where a long HOME environment variable is copied into a fixed-size buffer in pcd_open. Impact: local attackers could execute arbitrary code (with the Debian/Mandrake notes indicating poten...

CVE-2003-0649: Undefined Security Weakness

Buffer overflow in xpcd-svga for xpcd 2.08 and earlier allows local users to execute arbitrary code via a long HOME environment variable...

DEBIAN-CVE-2003-0454

Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via a long HOME environment variable...

XBlast 2.6.1 - HOME Environment Local Buffer Overflow

XBlast 2.6.1 - HOME Environment Local Buffer Overflow // source: https://www.securityfocus.com/bid/8296/info XBlast is contains a locally exploitable buffer overflow vulnerability due to insufficient bounds checking of data supplied via the HOME environment variable. Successful exploitation would...

XBlast 2.6.1 - 'HOME Environment' Local Buffer Overflow

// source: https://www.securityfocus.com/bid/8296/info XBlast is contains a locally exploitable buffer overflow vulnerability due to insufficient bounds checking of data supplied via the HOME environment variable. Successful exploitation would allow a local user to execute code with a gid of game...

Tower Toppler 0.96 - 'HOME Environment' Local Buffer Overflow

// source: https://www.securityfocus.com/bid/8132/info A problem with the software may make elevation of privileges possible. It has been reported that a buffer overflow exists in Tower Toppler. A local user may be able to exploit this issue to execute code with the privileges of the toppler...

CVE-2003-0454: Undefined Security Weakness

Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via a long HOME environment variable...

Dune buffer overflow

Buffer overflow on request to user's web home with loversized name...

Low: Red Hat Security Advisory: lv security update

Updated lv packages that fix the possibility of local privilege escalation are now available. Lv is a powerful file viewer similar to less. It can decode and encode multilingual streams through many coding systems, such as ISO-8859, ISO-2022, EUC, SJIS Big5, HZ, and Unicode. A bug has been found ...

CVE-2003-0269

Buffer overflow in youbin allows local users to gain privileges via a long HOME environment variable...

CVE-2003-0269

CVE-2003-0269: Buffer overflow in youbin enables local privilege escalation when a long HOME environment variable is supplied. Described as LOCAL attack, with LOW complexity and no authentication required; impact is complete confidentiality, integrity, and availability. No remediation details are...

CVE-2003-0269

Buffer overflow in youbin allows local users to gain privileges via a long HOME environment variable...

CVE-2003-0269: Undefined Security Weakness

Buffer overflow in youbin allows local users to gain privileges via a long HOME environment variable...

Youbin 2.53.03.4 - HOME Buffer Overflow

Youbin 2.53.03.4 - HOME Buffer Overflow source: https://www.securityfocus.com/bid/7503/info It has been reported that youbin is vulnerable to a locally exploitable buffer overflow. The problem is said to occur while processing environment variables. Specifically, an internal memory buffer may be...

Youbin 2.5/3.0/3.4 - 'HOME' Buffer Overflow

source: https://www.securityfocus.com/bid/7503/info It has been reported that youbin is vulnerable to a locally exploitable buffer overflow. The problem is said to occur while processing environment variables. Specifically, an internal memory buffer may be overrun while handling a HOME environmen...

CVE-2002-1427

The printhtmltofile function in edit.cgi for Easy Homepage Creator 1.0 does not check user credentials, which allows remote attackers to modify home pages of other users...

Multiple bugs in Seti@home

Buffer overflows, infomration leak...

FreeBSD-SN-03:02

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SN-03:02 Security Notice The FreeBSD Project Topic: security issue in SETI@home client Announced: 2003-04-08 I. Introduction A port in the FreeBSD Ports Collection i...