6492 matches found
CVE-2007-2444: Improper Privilege Management
Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user...
CVE-2005-4706
Technical details about CVE-2005-4706 are not publicly provided in the connected documents. The available sources summarize an unspecified denial-of-service in Solaris 10. Monitor for updated vendor advisories or patch information.
CVE-2005-4706
Unspecified vulnerability in the "privilege management" feature of Sun Solaris 10 allows local users to cause a denial of service panic via unknown vectors that trigger a null dereference in the secpolicyfscommon function...
CVE-2005-4706: Undefined Security Weakness
Unspecified vulnerability in the "privilege management" feature of Sun Solaris 10 allows local users to cause a denial of service panic via unknown vectors that trigger a null dereference in the secpolicyfscommon function...
CVE-2005-4706
Unspecified vulnerability in the "privilege management" feature of Sun Solaris 10 allows local users to cause a denial of service panic via unknown vectors that trigger a null dereference in the secpolicyfscommon function...
Multiple Sun Solaris vulnerabilities
File system privilege management feature panic. procfs protected file names information leak...
CVE-2004-1349: Improper Privilege Management
gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files...
Moderate: Red Hat Security Advisory: : : : Updated tcpdump packages fix various vulnerabilities
Updated tcpdump, libpcap, and arpwatch packages for iSeries and pSeries fix various vulnerabilities. Tcpdump is a command-line tool for monitoring network traffic. The Red Hat tcpdump packages advertise that by default tcpdump will drop permissions to user 'pcap'. Due to a compilation error this...
CVE-2002-0367: Improper Privilege Management
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit...
CVE-2002-0049: Improper Privilege Management
Microsoft Exchange Server 2000 System Attendant gives "Everyone" group privileges to the WinReg key, which could allow remote attackers to read or modify registry keys...
CVE-2002-0080: Improper Privilege Management
rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed...