2884 matches found
SSH Communications Security SSH 1.2.27 - Authentication Socket File Creation
SSH Communications Security SSH 1.2.27 - Authentication Socket File Creation source: https://www.securityfocus.com/bid/660/info A vulnerability in SSH's creation of the authentication agent UNIX domain socket allows local users to create a UNIX domain socket with an arbitrary file name in the...
CVE-1999-0697
SCO Doctor allows local users to gain root privileges through a Tools option...
netbsd.svr4.dev.txt
Date: Wed, 21 Apr 1999 11:19:23 +1000 From: matthew green To: [email protected] Subject: NetBSD Security Advisory 1999-009 -----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 1999-009 ================================= Topic: SVR4 compatibility device creation vulnerability Version:...
CVE-1999-1165
GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to 1 gain root privileges via a malicious program in the .fingerrc file, or 2 read arbitrary files via symbolic links from .plan, .forward, or .project files...
CVE-1999-1019
SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, which allows local users to replace a privileged executable processd with a Trojan horse, facilitating a root or Administrator compromise...
CVE-1999-0731
The KDE klock program allows local users to unlock a session using malformed input...
CVE-1999-1496
Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a program, which generates a different error message when the file does not exist...
G. Wilford man 2.3.10 - Symlink
G. Wilford man 2.3.10 - Symlink source: https://www.securityfocus.com/bid/305/info The man command created a temporary file under /tmp with a predictable name and is willing to follow symbolic links. This may allow malicious local users to create arbitrarily named files. zsoelim1 is a utility par...
CVE-1999-0765
SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor...
AZL-7330 CVE-1999-0475 affecting package procmail 3.22-53
A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail...
CVE-1999-0410
The cancel command in Solaris 2.6 i386 has a buffer overflow that allows local users to obtain root access...
CVE-1999-0380
SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service RAS is enabled by setting a user's Finger File to point to the target file, then running finger on the user...
CVE-1999-1405
snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which could allow local users to access the shadowed password file by creating /tmp/ibmsupt/general/passwd before root runs snap...
CVE-1999-0371
Lynx allows a local user to overwrite sensitive files through /tmp symlinks...
CVE-1999-1159
SSH 2.0.11 and earlier allows local users to request remote forwarding from privileged ports without being root...
CVE-1999-1188
mysqld in MySQL 3.21 creates log files with world-readable permissions, which allows local users to obtain passwords for users who are added to the user database...
CVE-1999-1277
BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key, which could allow other local users to gain privileges by reading the password...
CVE-1999-1071
Excite for Web Servers EWS 1.1 installs the Architext.conf authentication file with world-writeable permissions, which allows local users to gain access to Excite accounts by modifying the file...