CVE-2001-0831

Unknown vulnerability in Oracle Label Security in Oracle 8.1.7 and 9.0.1, when audit functionality, SETLABEL, or SQLPredicate is being used, allows local users to gain additional access...

CVE-2001-0833

Buffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 allows local users to execute arbitrary code via a long ORACLEHOME environment variable, aka the "Oracle Trace Collection Security Vulnerability."...

NAVCE 7.51 default permission exploit

============================================================ Topic: ===== Default NTFS permissions post-software install allow local user security context to modify "managed" Norton AntiVirus Corporate Edition 7.51 client configuration. Affected: ======== Norton AntiVirus Corporate Edition NAVCE...

CVE-2001-0916

Buffer overflow in Berkeley parallel make pmake 2.1.33 and earlier allows a local user to gain root privileges via a long check argument of a shell definition...

CVE-2001-1415

vi.recover in OpenBSD before 3.1 allows local users to remove arbitrary zero-byte files such as device nodes...

CVE-2001-0715

Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to obtain potentially sensitive information about the mail queue by setting debugging flags to enable debug mode...

CVE-2001-1098

Cisco PIX firewall manager PFM 4.32g logs the enable password in plaintext in the pfm.log file, which could allow local users to obtain the password by reading the file...

CVE-2001-1255

WinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local users to obtain unathorized access the MySQL database...

CVE-2001-0351

Microsoft Windows 2000 telnet service allows a local user to make a certain system call that allows the user to terminate a Telnet session and cause a denial of service...

CVE-1999-1347

Xsession in Red Hat Linux 6.1 and earlier can allow local users with restricted accounts to bypass execution of the .xsession file by starting kde, gnome or anotherlevel from kdm...

CVE-1999-1561

Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file scserv.conf, which could allow a local user to gain administrative privileges on the server...

CVE-1999-1282

The CVE-1999-1282 entry concerns RealSystem G2 server where the administrator password is stored in cleartext in a world-readable configuration file. The underlying impact is that local users can gain privileges on the affected system due to this configuration weakness. The provided documents do ...

CVE-1999-1242

Technical details (affected product, vulnerable component, exploitability, or patch information) are not publicly provided in the connected documents for CVE-1999-1242; monitor for updates.

CVE-1999-1304

Vulnerability in login in SCO UNIX 4.2 and earlier allows local users to gain root access...

CVE-1999-1405

snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which could allow local users to access the shadowed password file by creating /tmp/ibmsupt/general/passwd before root runs snap...

CVE-1999-1268

Vulnerability in KDE konsole allows local users to hijack or observe sessions of other users by accessing certain devices...

CVE-1999-1071

Excite for Web Servers EWS 1.1 installs the Architext.conf authentication file with world-writeable permissions, which allows local users to gain access to Excite accounts by modifying the file...

CVE-1999-1101

Kabsoftware Lydia utility uses weak encryption to store user passwords in the lydia.ini file, which allows local users to easily decrypt the passwords and gain privileges...

CVE-1999-1475

ProFTPd 1.2 compiled with the modsqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privileges by reading wtmp, e.g. via the last command...

CVE-1999-1126

Cisco Resource Manager CRM 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration information including usernames, passwords, and SNMP community strings, from 1 swimswd.log, 2 swimdebug.log, 3 dbidebug.log, and 4 temporary files...