security flaw

Unspecified vulnerability in the sctpmakeabortuser function in the SCTP implementation in Linux 2.6.x before 2.6.17.10 and 2.4.23 up to 2.4.33 allows local users to cause a denial of service panic and possibly gain root privileges via unknown attack vectors...

CVE-2006-4031

CVE-2006-4031 affects MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24, enabling a local user to access a table via a previously created MERGE table even after privileges are revoked from the original table. The root cause is the MERGE storage engine not enforcing revocation in this scenario. Remedi...

[Full-disclosure] Re: rPSA-2006-0122-1 kernel

Justin M. Forbes wrote: Description: Previous versions of the kernel package are vulnerable to two denial of service attacks. The first allows any local user to fill up file systems by causing core dumps to write to directories to which they do not have write access permissions. The second applie...

security flaw

MySQL before 4.1.13 allows local users to cause a denial of service persistent replication slave crash via a query with multiupdate and subselects...

CVE-2006-1587

NetBSD 1.6 up to 3.0, when a user has "set record" in .mailrc with the default umask set, creates the record file with 0644 permissions, which allows local users to read the record file...

CVE-2006-1285

The CVE-2006-1285 issue affects Symantec Ghost 8.0/8.2 (as used in Symantec Ghost Solutions Suite 1.0). The root cause is a memory-mapping permission problem in the database shared memory, causing read/write access for all users and enabling potential local access to data. Affected component: SQL...

CVE-2006-1280

CGI::Session 4.03-1 does not set proper permissions on temporary files created in 1 Driver::File and 2 Driver::dbfile, which allows local users to obtain privileged information, such as session keys, by viewing the files...

security flaw

crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink. NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235...

CVE-2006-0812

The CVE-2006-0812 vulnerability affects VisNetic AntiVirus Plug-in for MailServer (DKAVUpSch.exe) versions 4.6.0.4 and 4.6.1.1 (and possibly earlier than 4.6.1.2). The root cause is that the plug-in does not drop privileges before executing other programs, enabling a local attacker with access to...

CVE-2006-0512

PADL MigrationTools 46 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the temporary files, which are not properly created by 1 migrateallonline.sh, 2 migratealloffline.sh, 3 migrateallnetinfoonline.sh, 4 migrateallnetinfooffline.s...

DEBIAN-CVE-2006-0126

rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices...

CVE-2006-0126

rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices...

DEBIAN-CVE-2005-4158

Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the 1 PERLLIB, 2 PERL5LIB, and 3 PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are included...

CVE-2005-2977

The SELinux version of PAM before 0.78 r3 allows local users to perform brute force password guessing attacks via unixchkpwd, which does not log failed guesses or delay its responses...

CVE-2005-3149

Uim 0.4.x before 0.4.9.1 and 0.5.0 and earlier does not properly handle the LIBUIMVANILLA environment variable when a suid or sgid application is linked to libuim, such as immodule for Qt, which allows local users to gain privileges...

security flaw

mysqlinstalldb in MySQL 4.1.x before 4.1.12 and 5.x up to 5.0.4 creates the mysqlinstalldb.X file with a predictable filename and insecure permissions, which allows local users to execute arbitrary SQL commands by modifying the file's contents...

security flaw

gdb before 6.3 searches the current working directory to load the .gdbinit configuration file, which allows local users to execute arbitrary commands as the user running gdb...

security flaw

crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink. NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235...

CVE-2005-3070

HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cause a denial of service by creating the socket using the hyla.unix temporary file...

CVE-2001-1527

The CVE affects easyNews 1.5 and earlier, where administration passwords are stored in cleartext in the file settings.php. This enables local users to obtain passwords and gain access due to improper password storage. The provided documents do not specify a vendor patch or remediation steps; no e...