CVE-2001-0620

CVE-2001-0620 affects iPlanet Calendar Server 5.0p2 and earlier. The vulnerability arises because the configuration file stores the Netscape Admin Server (NAS) LDAP credential in cleartext with insecure permissions, allowing a local attacker to obtain the administrator username and password, gain...

PT-2001-1707 · Isc · Bind

Name of the Vulnerable Software and Affected Versions: BIND versions 8.2.4 and earlier BIND versions 9.1.2 and earlier Description: The issue allows attackers to obtain HMAC-MD5 shared secret keys used for DNS Transactional Signatures TSIG due to insecure permissions set by dnskeygen in BIND 8 an...

CVE-2001-0378

readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover potentially sensitive information via readline history files...

CVE-2001-0416

sgml-tools aka sgmltools before 1.0.9-15 creates temporary files with insecure permissions, which allows other users to read files that are being processed by sgml-tools...

CVE-2001-0208

MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with insecure permissions, which allows local users to gain privileges by modifying files...

CVE-2000-0650

The CVE-2000-0650 entry concerns VirusScan 4.5 and NetShield 4.5. Insecure permissions on the registry key identifying the AutoUpgrade directory could let a local user replace SETUP.EXE with a Trojan Horse to execute arbitrary commands. The report does not specify a patch or remediation, affected...

CVE-2000-0650

The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade directory, which allows local users to execute arbitrary commands by replacing SETUP.EXE in that directory with a Trojan Horse...

CVE-2001-0208

CVE-2001-0208 affects MicroFocus Cobol 4.1 with the AppTrack feature enabled. The root cause is insecure permissions on the installed mfaslmf directory and a nolicense file, which allows local users to modify these files and gain privileges. The connected sources confirm the issue but do not spec...

CVE-2001-0208

MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with insecure permissions, which allows local users to gain privileges by modifying files...

Microsoft Windows NT 4.0/TSE Winsock2ProtocolCatalogMutex has insecure permissions (MS01-003)

Overview A mutex controlling access to resources required for networking on Windows NTMicrosoft Windows NT 4.0 and Microsoft Windows NT 4.0, Terminal Server Edition, has inappropriate permissions. Description In general terms, a mutex is an object used to control access to a resource e.g. a...

Slackware Linux /usr/bin/ppp-off Insecure /tmp Call Exploit

Exploit for linux platform in category dos / poc =========================================================== Slackware Linux /usr/bin/ppp-off Insecure /tmp Call Exploit =========================================================== !/bin/sh In SlackWare Linux the script /usr/bin/ppp-off writes the...

Samba 2.0.7 - SWAT Symlink (1)

// source: https://www.securityfocus.com/bid/1872/info The Samba software suite is a collection of programs that implements the SMB protocol for unix systems, allowing you to serve files and printers to Windows, NT, OS/2 and DOS clients. This protocol is sometimes also referred to as the LanManag...

CVE-2000-0650

The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade directory, which allows local users to execute arbitrary commands by replacing SETUP.EXE in that directory with a Trojan Horse...

CVE-2000-0083

HP asecure creates the Audio Security File audio.sec with insecure permissions, which allows local users to cause a denial of service or gain additional privileges...

CVE-2000-0083

CVE-2000-0083 describes a vulnerability in HP asecure where the Audio Security File audio.sec is created with insecure permissions. This local-privilege issue can allow an unprivileged local user to cause a denial of service or gain additional privileges. The associated NVD entry specifies a loca...

CVE-2000-0100

The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing the program...

CVE-2000-0100

The CVE-2000-0100 entry concerns the SMS Remote Control program, which is installed with insecure permissions that let local users gain privileges by modifying or replacing the program. The NVD entry assigns a CVSS v2.0 base score of 7.2 (HIGH) with LOCAL attack vector, low attack complexity, and...

CVE-2000-0083

HP asecure creates the Audio Security File audio.sec with insecure permissions, which allows local users to cause a denial of service or gain additional privileges...

CVE-2000-0298

The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories...

CVE-1999-1126

Cisco Resource Manager CRM 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration information including usernames, passwords, and SNMP community strings, from 1 swimswd.log, 2 swimdebug.log, 3 dbidebug.log, and 4 temporary files...