CVE-2000-1156

StarOffice 5.2 follows symlinks and sets world-readable permissions for the /tmp/soffice.tmp directory, which allows a local user to read files of the user who is using StarOffice...

CVE-2000-0993

Format string vulnerability in pwerror function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd...

CVE-2000-0994

Format string vulnerability in OpenBSD fstat program and possibly other BSD-based operating systems allows local users to gain root privileges via the PWD environmental variable...

CVE-2000-0935

Samba Web Administration Tool SWAT in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file...

CVE-2000-1060

The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" command in the xinitrc program, which allows local users to sniff X Windows traffic and gain privileges...

CVE-2000-1013

The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable...

CVE-2000-0954

Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise the server...

Vulnerability in Winsock FTPD 2.41/3.00 (Pro)

Overdrive Advisory 1 --------------------------- Synopsis Subject : Vulnerability in Winsock ftpd Application : Winsock FTPd v2.41 RC14, Winsock FTPd v2.41 Pro, Winsock FTPd v3.00 Pro Platform : Win32 Description : a local user can break the chroot jail Date : 11/28/2000 Author : Interstellar...

Microsoft Windows SMB Registry : WinVNC's Key Permissions

The registry key HKLM\Software\ORL\WinVNC3 is writeable and/or readable by users who are not in the admin group. This key contains the VNC password of this host, as well as other configuration setup. As this program allows remote access to this computer with the privileges of the currently logged...

Дырка в xfce (startup script desktop access)

Скрипт, запускаемый при старте программы, позволяет доступ к рабочему столу любым локальным пользователям, что позволяет, например, перехватывать события клавиатуры...

HP-UX 10.20 - registrar Local Arbitrary File Read

source: https://www.securityfocus.com/bid/1919/info The registrar service that ships with version 10.20 possibly others of HP's HP-UX operating system contains a vulnerability that may allow a local user to read any file on the hosts filesystem. The service which listens on tcp port 1712 writes t...

CVE-2000-0786

GNU userv 1.0.0 and earlier does not properly perform file descriptor swapping, which can corrupt the USERVGROUPS and USERVGIDS environmental variables and allow local users to bypass some access restrictions...

CVE-2000-0164

Sun Internet Mail Server (SIMS) installations create a world-readable file that allows local users to obtain passwords. Affected: SIMS. Issue: world-writable or world-readable file exposure leading to complete confidentiality impact for local users. Root cause and exact file/path are not specifie...

CVE-2000-0604

gkermit in Red Hat Linux is improperly installed with setgid uucp, which allows local users to modify files owned by uucp...

CVE-2000-0515

The snmpd.conf configuration file for the SNMP daemon snmpd in HP-UX 11.0 is world writable, which allows local users to modify SNMP configuration or gain privileges...

CVE-2000-0475

Windows 2000 allows a local user process to access another user's desktop within the same windows station, aka the "Desktop Separation" vulnerability...

CVE-2000-0164

The installation of Sun Internet Mail Server SIMS creates a world-readable file that allows local users to obtain passwords...

CVE-2000-0322

The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters...

CVE-2000-0494

Veritas Volume Manager contains a local-privilege issue where a world-writable .server_pids file can be modified by an unprivileged user to inject commands. Those commands are then executed by the vmsa_server script, enabling potentially arbitrary code execution with local access. The CVE descrip...

CVE-2000-0552

ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive information...