2905 matches found
BUFFER OVERRUN VULNERABILITIES IN KERBEROS
-----BEGIN PGP SIGNED MESSAGE----- BUFFER OVERRUN VULNERABILITIES IN KERBEROS SUMMARY: Serious buffer overrun vulnerabilities exist in many implementations of Kerberos 4, including implementations included for backwards compatibility in Kerberos 5 implementations. Other less serious buffer overru...
rm.racecondition
Synopsis: If root ever does "rm -rf /tmp/foo" for a directory structure not completely owned by root, a local user can delete all files that root can. Such deletions are common for a /tmp cleanup and b before creating a specific directory in /tmp/. Details: "rm -r" implementations Solaris 7, Gnu...
CVE-2000-0407
Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option...
CVE-2000-0249
The AIX Fast Response Cache Accelerator FRCA allows local users to modify arbitrary files via the configuration capability in the frcactrl program...
CVE-2000-0250
The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords...
CVE-1999-0957
MajorCool mjkeycache program allows local users to modify files via a symlink attack...
CVE-2000-0317
Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option...
FreeBSD-SA-00:15.imap-uw
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:15 Security Advisory FreeBSD, Inc. Topic: imap-uw allows local users to deny service to any mailbox Category: ports Module: imap-uw Announced: 2000-04-24 Credits: Alex...
CVE-2000-0336
Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack...
SuSE Linux 6.x - Arbitrary File Deletion
SuSE Linux 6.x - Arbitrary File Deletion source: https://www.securityfocus.com/bid/1130/info A vulnerability exists in SuSE Linux, version 6.3 and prior, that can allow arbitrary users to delete any file on the system. If the MAXDAYSINTMP variable is set in /etc/rc.config to be larger than 0, any...
FreeBSD-SA-00:13.generic-nqs
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:13 Security Advisory FreeBSD, Inc. Topic: generic-nqs contains a local root compromise Category: ports Module: generic-nqs Announced: 2000-04-19 Credits: Philippe...
CVE-2000-0269
Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modify communications between Emacs and the subprocess...
CVE-2000-0250
The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords...
CVE-2000-0210
The lit program in Sun Flex License Manager FlexLM follows symlinks, which allows local users to modify arbitrary files...
CVE-1999-0786
The dynamic linker in Solaris allows a local user to create arbitrary files via the LDPROFILE environmental variable and a symlink attack...
CVE-2000-0210
The lit program in Sun Flex License Manager FlexLM follows symlinks, which allows local users to modify arbitrary files...
CVE-2000-0143
The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP...
sco.snmpd.txt
====================================================================== Network Associates, Inc. SECURITY ADVISORY February 7, 2000 SNMPD default writable community string ====================================================================== SYNOPSIS The default configuration of SCO OpenServer...