4481 matches found
CVE-2000-1096
The CVE-2000-1096 entry concerns the crontab utility by Paul Vixie, where temporary files are created with predictable names and there is insufficient verification that the file is owned by the user running crontab -e. This enables local users who have write access to the crontab spool directory ...
CVE-2000-0111
The RightFax web client uses predictable session numbers, which allows remote attackers to hijack user sessions...
CVE-2000-0111: Undefined Security Weakness
The RightFax web client uses predictable session numbers, which allows remote attackers to hijack user sessions...
CVE-2000-1096: Undefined Security Weakness
crontab by Paul Vixie uses predictable file names for a temporary file and does not properly ensure that the file is owned by the user executing the crontab -e command, which allows local users with write access to the crontab spool directory to execute arbitrary commands by creating...
CVE-2001-1436
Dallas Semiconductor iButton DS1991 returns predictable values when given an incorrect password, which makes it easier for users with physical access to conduct dictionary attacks against the device password...
CVE-2001-0163
Cisco AP340 base station produces predictable TCP Initial Sequence Numbers ISNs, which allows remote attackers to spoof or hijack TCP connections...
tcsh: unsafe tempfile in << redirects
PROBLEM: /tmp echo 'hello world' rootfile /tmp chmod 600 rootfile /tmp ln -s rootfile sh$$ /tmp chown -h 666.666 sh$$ /tmp ls -l rootfile sh$$ -rw------- 1 root root 12 Oct 29 03:55 rootfile lrwxrwxrwx 1 666 666 8 Oct 29 03:56 sh12660 - rootfile /tmp cat BAR ? FOO ? BAR FOO o world /tmp ls -l...
CVE-2000-0335
The CVE-2000-0335 issue affects the resolver in glibc 2.1.3 , which uses predictable IDs. This design allows a local attacker to cause DNS query spoofing by manipulating IDs, undermining DNS query integrity. The vulnerability’s impact is described as the ability to spoof results, with a base CVSS...
CVE-2000-0445
The CVE-2000-0445 issue affects PGP 5.x on Unix-like systems where non-interactive (batch) key generation via pgpk can use insufficient randomness collected from /dev/random. The root cause is how PGP v5.0 processes entropy when generating keys in unattended mode, potentially producing weak, pred...
CVE-2000-0579
IRIX crontab is affected: it creates temporary files with predictable names and the user’s umask, enabling local users to modify another user’s crontab while it is being edited. The CVSS data indicates local access with partial confidentiality/integrity/availability impact. No remediation details...
CVE-2000-0445
The pgpk command in PGP 5.x on Unix systems uses an insufficiently random data source for non-interactive key pair generation, which may produce predictable keys...
CVE-2000-0338: Improper Locking
Concurrent Versions Software CVS uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate CVS user...
CVE-2000-0335: Undefined Security Weakness
The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results...
CVE-2000-0445: Undefined Security Weakness
The pgpk command in PGP 5.x on Unix systems uses an insufficiently random data source for non-interactive key pair generation, which may produce predictable keys...
CVE-2000-0579: Undefined Security Weakness
IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow local users to modify another user's crontab file as it is being edited...
CVE-2000-0578
SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file names, which could allow local users to insert malicious contents into these files as they are being compiled by another user...
CVE-2000-0578: Undefined Security Weakness
SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file names, which could allow local users to insert malicious contents into these files as they are being compiled by another user...
CVE-2000-0397
CVE-2000-0397 affects the EMURL web-based email account software. The vulnerability arises because session URLs encode predictable identifiers, enabling a remote attacker to access a user’s email account. The available documents do not specify affected product versions, root cause beyond predicta...
CVE-2000-0397: Undefined Security Weakness
The EMURL web-based email account software encodes predictable identifiers in user session URLs, which allows a remote attacker to access a user's email account...