CVE-2001-0496

CVE-2001-0496 affects the kdesu component of kdelibs. Affected software creates world-readable temporary files that contain authentication information, enabling a local attacker to gain privileges on the system. The Mandrake advisory MDKSA-2001:046-3 describes the issue and provides updated packa...

CVE-2000-0818

The CVE-2000-0818 issue affects Oracle Listener (tnslsnr) in default installations of versions 7.3.4, 8.0.6, and 8.1.6, allowing an attacker to log data to arbitrary files and execute commands through SET TRC_FILE or SET LOG_FILE. The provided documents indicate the vulnerability enables modifica...

Multiple archivers directory traversal and path globbing

Topic: Directory traversal and path globbing in multiple archivers Author: 3APA3A Affected Software: GNU tar = 1.13.19, Info-Zip UnZip = 5.42, RARSoft rar = 2.02, PKWare pkzipc = 4.00 Not affected: rar 2.80, WinZIP 8.0 Risk: low/average Released: July, 2, 2001 SECURITY.NNOV advisories:...

CVE-2001-0046

CVE-2001-0046 involves a registry permissions weakness in Windows NT 4.0 where the key HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parameters can be modified by users outside the admin group. This write access enables an unprivileged (non-admin) user to gain additional privileges, constituting a ...

CVE-2000-1001

CVE-2000-1001 affects Element InstantShop: the add_2_basket.asp endpoint allows remote attackers to modify price information via the hidden form variable price. The underlying issue is input/data integrity on the price field, enabling tampering before processing. The CVSS data assigns a base scor...

IBM DB2 SQL DOS

1.Description The DB2 Universal Database builds upon the stability and performance of DB2 on the mainframe and provides the features required in a distributed database product. DB2 Universal Database UDB is IBM's relational database server solution for the UNIX, OS/2 and Windows NT/2000 operating...

CVE-2000-0677

Buffer overflow in IBM Net.Data db2www CGI program allows remote attackers to execute arbitrary commands via a long PATHINFO environmental variable...

CVE-2000-0430

The provided documents identify CVE-2000-0430 as a flaw in Cart32 where remote attackers can access sensitive debugging information by appending /expdate to the URL. Affected component: Cart32 (web/URL handling). Root cause: improper handling of URL paths leading to exposure of debugging data; im...

CVE-2000-0361

The CVE-2000-0361 issue affects wvdial 1.4 and earlier, where the PPP wvdial.lxdialog script creates a .config file with world-readable permissions. This allows a local attacker who is in the dialout group to access login credentials stored in that file. The available connected sources confirm th...

CVE-2000-0103

The CVE-2000-0103 entry concerns the SmartCart shopping cart application, where remote attackers can modify sensitive purchase information through hidden form fields. The core issue is the manipulation of hidden fields used in purchase workflows, enabling partial breaches of confidentiality and i...

CVE-2000-0110

CVE-2000-0110 affects the WebSiteTool shopping cart application, where remote attackers can modify sensitive purchase information by manipulating hidden form fields in the shopping cart. The PT-2000-1098 entry corroborates this description but does not specify affected versions or a fix. No explo...

CVE-1999-0606

The CVE-1999-0606 entry concerns the EZMall 2000 shopping cart CGI program mall2000.cgi. The issue is described as an incorrect configuration that could disclose private information, affecting confidentiality (PARTIAL) with a CVSS v2 base score of 5.0 (Network, low attack complexity, no authentic...

CVE-1999-0198

The CVE-1999-0198 entry concerns the finger service (finger .@host) which may disclose information about user accounts on affected systems. The core issue is an information-disclosure vulnerability in the remote finger daemon, enabling an attacker to view which accounts exist or have never been u...

CVE-2000-0008

The CVE-2000-0008 issue concerns FTPPro, where local users can read sensitive data stored in plain text. Connected sources (PT-1999-1817) name FTPPro and describe the vulnerability as allowing local access to plaintext information, but do not specify affected versions or a repair/fix. Other conne...

PT-1999-1817 · Ftppro · Ftppro

Name of the Vulnerable Software and Affected Versions: FTPPro affected versions not specified Description: The issue allows local users to read sensitive information stored in plain text. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

CVE-1999-0007

Technical details for CVE-1999-0007 are not publicly available in the provided documents. Monitor for updates from authoritative sources.

aix-infod.txt

RSI.0011.11-12-98.AIX.INFOD |:::. |::::: |::::. |::::: |::::: |::::. .. :: .. .. :: .. .. .. :: |:::: |:::: |:::: :::::: |::::: |:::: |: |: :: |: |: |:: |: |: :: |: :: |::::: |: |::::: |::::: |::::: Repent Security Incorporated, RSI http://www.repsec.com RSI ALERT ADVISORY --- CREDIT...

PT-1999-1060 · Debian · Debian

Name of the Vulnerable Software and Affected Versions: Debian GNU/Linux affected versions not specified Description: A buffer overflow issue in the "Super" utility affects Debian GNU/Linux and other operating systems, allowing local users to execute commands as root. Recommendations: At the momen...

PT-1999-1182 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A system is operating in "promiscuous" mode, allowing it to perform packet sniffing. Recommendations: At the moment, there is no information about a newer version that contains a fix fo...

PT-1999-1198 · Router · Router

Name of the Vulnerable Software and Affected Versions: Router affected versions not specified Description: The issue concerns a router's configuration service or management interface, such as a web server or telnet, being configured to allow connections from arbitrary hosts. Recommendations: At t...