2908 matches found
CVE-2004-0395
The xatitv program in the gatos package does not properly drop root privileges when the configuration file does not exist, which allows local users to execute arbitrary commands via shell metacharacters in a system call...
DEBIAN-CVE-2004-0422
flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack...
CVE-2004-0497
Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4...
RHEL 2.1 : fileutils (RHSA-2003:016)
Updated fileutils packages are available which fix a race condition in recursive remove and move commands. The fileutils package includes a number of GNU versions of common and popular file management utilities. A race condition in recursive use of rm and mv commands in fileutils 4.1 and earlier...
FreeBSD : SA-04:11.msync
The remote host is running a version of FreeBSD which contains a programming error in the msync2 system call which may let a local user with read access to a given file to forbid any change to this file to be written to disk. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...
CVE-2004-0133
The XFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the XFS file system, which allows local users to obtain sensitive information by reading the raw device...
CVE-2004-0482
Multiple integer overflows in 1 procfscmdline.c, 2 procfsfpregs.c, 3 procfslinux.c, 4 procfsregs.c, 5 procfsstatus.c, and 6 procfssubr.c in procfs for OpenBSD 3.5 and earlier allow local users to read sensitive kernel memory and possibly perform other unauthorized activities...
CVE-2003-0618
Multiple vulnerabilities in suidperl 5.6.1 and earlier allow a local user to obtain sensitive information about files for which the user does not have appropriate permissions...
CVE-2003-0618
Multiple vulnerabilities in suidperl 5.6.1 and earlier allow a local user to obtain sensitive information about files for which the user does not have appropriate permissions...
DEBIAN-CVE-2003-0648
Multiple buffer overflows in vfte, based on FTE, before 0.50, allow local users to execute arbitrary code...
CVE-2004-1948
NcFTP client 3.1.6 and 3.1.7, when the username and password are included in an FTP URL that is provided on the command line, allows local users to obtain sensitive information via "ps aux," which displays the URL in the process list...
CVE-2003-1008
Unknown vulnerability in Mac OS X 10.2.8 and 10.3.2 allows local users to bypass the screen saver login window and write a text clipping to the desktop or another application...
CVE-2003-0618
Multiple vulnerabilities in suidperl 5.6.1 and earlier allow a local user to obtain sensitive information about files for which the user does not have appropriate permissions...
CVE-2004-0151
Unknown vulnerability in xitalk 1.1.11 and earlier allows local users to execute arbitrary commands...
CVE-2004-1834
moddiskcache in Apache 2.0 through 2.0.49 stores client headers, including authentication information, on the hard disk, which could allow local users to gain sensitive information...
CVE-2003-1034
The RPM installation of SAP DB 7.x creates the 1 dbmsrv or 2 lserver programs with world-writable permissions, which allows local users to gain privileges by modifying those programs...
PT-2004-1382 · Red Hat +1 · Red Hat +1
Name of the Vulnerable Software and Affected Versions: Symantec AntiVirus Scan Engine versions 4.0 through 4.3 Description: The issue allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log. This is related to the LiveUpdate capability liveupdate.sh i...
CVE-2003-0612
Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin...
CVE-2003-1018
CVE-2003-1018 is a format-string vulnerability in the enq command on AIX 4.3, 5.1, and 5.2 that allows local users with rintq group privileges to gain privileges via unspecified vectors. Connected Nessus entries indicate the issue is addressed by vendor patches: AIX 5.2 IY45329 and AIX 5.1 IY4625...
