7371 matches found
CVE-2001-0067
The installation of J-Pilot creates the .jpilot directory with the user's umask, which could allow local attackers to read other users' PalmOS backup information if their umasks are not securely set...
CVE-2001-0067
CVE-2001-0067 concerns the jpilot program, which creates a .jpilot directory in the user’s home with world-writable permissions (777). This insecure default enables local attackers to read other users’ PalmOS backups if umasks are not strictly set. Root cause is directory creation with permissive...
CVE-2000-0996
Format string vulnerability in OpenBSD su program and possibly other BSD-based operating systems allows local attackers to gain root privileges via a malformed shell...
CVE-2000-0996
Format string vulnerability in OpenBSD su program and possibly other BSD-based operating systems allows local attackers to gain root privileges via a malformed shell...
CVE-2000-0997
Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root privileges...
CVE-2000-0998
CVE-2000-0998 describes a format-string vulnerability in the top program that allows local attackers to gain root privileges via the kill or renice functions. The connected documents confirm the vulnerability description but do not provide concrete exploitation details, affected product versions,...
CVE-2000-0998
Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" function...
CVE-2000-0468
CVE-2000-0468 affects HP-UX 10.20 and 11, where a local attacker can overwrite files via a symbolic link attack. The entry indicates local access with low complexity and partial confidentiality/integrity/availability impact (CVSS v2 base 4.6). The connected documents corroborate the description b...
CVE-2000-0184
The vulnerability CVE-2000-0184 affects the Linux printer subsystem via the printtool utility, which incorrectly sets printer configuration files to world-readable. This misconfiguration can allow a local attacker to read printer share passwords stored in those files, leading to potential unautho...
CVE-2000-0044
Macros in War FTP 1.70 and 1.67b2 allow local or remote attackers to read arbitrary files or execute commands...
CVE-2000-0155
Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other users access a drive...
CVE-2000-0155
CVE-2000-0155 affects Windows NT Autorun: the system executes the autorun.inf file on non-removable media, allowing a local attacker to specify an alternate program to run when other users access a drive. The provided documents describe the vulnerability in terms of its existence and impact (loca...
CVE-2000-0154
The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack...
CVE-2000-0164
The installation of Sun Internet Mail Server SIMS creates a world-readable file that allows local users to obtain passwords...
CVE-2000-0154
The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack...
CVE-2000-0118
The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing...
CVE-2000-0147
snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration...
CVE-1999-0480
Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack...
CVE-1999-0322
Technical details such as affected products, vulnerable components, versions, root cause, or a confirmed fix are not publicly provided in the connected documents. Monitor for updates.