CVE-2007-2894

The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of service virtual machine crash via unspecified vectors, resulting in a divide-by-zero error...

CVE-2007-1743

suexec in Apache HTTP Server httpd 2.2.3 does not verify combinations of user and group IDs on the command line, which might allow local users to leverage other vulnerabilities to create arbitrary UID/GID owned files if /proc is mounted. NOTE: the researcher, who is reliable, claims that the vend...

security flaw

The key serial number collision avoidance code in the keyallocserial function in Linux kernel 2.6.9 up to 2.6.20 allows local users to cause a denial of service crash via vectors that trigger a null dereference, as originally reported as "spinlock CPU recursion."...

CVE-2006-5585

CVE-2006-5585 is a local privilege-elevation vulnerability in the Client-Server Run-time Subsystem (CSRSS) of Microsoft Windows XP SP2 and Windows Server 2003. The issue arises from improper processing/validation of embedded file manifests by CSRSS, which could let a logged-on attacker run a craf...

CVE-2006-5298

The muttadvmktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safefopen function cal...

CVE-2006-2196

Unspecified vulnerability in pinball 0.3.1 allows local users to gain privileges via unknown attack vectors that cause pinball to load plugins from an attacker-controlled directory while operating at raised privileges...

CVE-2005-3126

The 1 kantiword kantiword.sh and 2 gantiword gantiword.sh scripts in antiword 0.35 and earlier allow local users to overwrite arbitrary files via a symlink attack on temporary a output and b error files...

CVE-2002-2202

Affected software: Outlook Express 6.0. Issue: The product does not delete messages from DBX mailbox files when a user empties the Deleted Items folder, allowing local users to read other users’ email. Evidence: Descriptions in Red Hat and NVD/JST documents corroborate this behavior. Impact: Loca...

CVE-2005-2693

cvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack...

CVE-2002-1946

The CVE-2002-1946 entry applies to Videsh Sanchar Nigam Limited (VSNL) Integrated Dialer Software version 1.2.000. The issue is that when the Save Password option is used, the password is stored in the registry using a weak, one-to-one encryption scheme, allowing local users to obtain and decrypt...

CVE-2005-1119

Sudo VISudo 1.6.8 and earlier allows local users to corrupt arbitrary files via a symlink attack on temporary files...

RX250305 - OpenMosixView : Multiple Race conditions - advisory and exploit

/ | | // / / / / | | / | / | |/ //|| / / research / . | REXOTECdotCOM | |=------= ADV RX250305 - OpenMosixView : Multiple Race conditions ------=| | | |=--- - INFORMATION ---------------------------------------------------------------------| VulnDiscovery: 2004/12/21 Release Date : 2005/03/25...

iSnooker <= 1.6.8 Local Password Disclosure Exploit

Exploit for unknown platform in category local exploits =================================================== iSnooker include include HKEY hKey; define BUFSIZE 100 char prgfilesBUFSIZE; DWORD dwBufLen=BUFSIZE; LONG lRet; int main ifRegOpenKeyExHKEYLOCALMACHINE,...

iPool &lt;= 1.6.81 Local Password Disclosure Exploit

No description provided by source. / iPool = v1.6.81 Local Password Disclosure Exploit by Kozan Application: iPool 1.6.81 Vendor: Memir Software - memirsoftware.com and The Pool Club - thepoolclub.com Vulnerable Description: iPool 1.6.81 discloses passwords to local users. Discovered & Coded by...

CVE-2005-0109

Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic key...

RHEL 2.1 / 3 : kdenetwork (RHSA-2005:175)

Updated kdenetwork packages that fix a file descriptor leak are now available. This update has been rated as having low security impact by the Red Hat Security Response Team The kdenetwork packages contain a collection of networking applications for the K Desktop Environment. A bug was found in t...

CVE-2004-1713

Technical details about CVE-2004-1713 are not provided in the connected documents; the materials only reiterate the basic description that local users could corrupt data files in HP PRM on HP-UX WLM. Monitor for updates.

CVE-2004-1713

Unknown vulnerability in HP Process Resource Manager PRM C.02.01.01 and earlier, as used by HP-UX Workload Manager WLM, allows local users to corrupt data files...

Low: Red Hat Security Advisory: vim security update

Updated vim packages that fix a security vulnerability are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. VIM Vi IMproved is an updated and improved version of the vi screen-based editor. The Debian Security Audit Project discovered ...

CVE-2004-1469

Format string vulnerability in the log function in SUS 2.0.2, and other versions before 2.0.6, allows local users to execute arbitrary code via format string specifiers in a command line argument that is passed directly to syslog...