6528 matches found
CVE-2005-4706
Unspecified vulnerability in the "privilege management" feature of Sun Solaris 10 allows local users to cause a denial of service panic via unknown vectors that trigger a null dereference in the secpolicyfscommon function...
Multiple Sun Solaris vulnerabilities
File system privilege management feature panic. procfs protected file names information leak...
CVE-2004-1349: Improper Privilege Management
gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files...
Moderate: Red Hat Security Advisory: : : : Updated tcpdump packages fix various vulnerabilities
Updated tcpdump, libpcap, and arpwatch packages for iSeries and pSeries fix various vulnerabilities. Tcpdump is a command-line tool for monitoring network traffic. The Red Hat tcpdump packages advertise that by default tcpdump will drop permissions to user 'pcap'. Due to a compilation error this...
CVE-2002-0367: Improper Privilege Management
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit...
CVE-2002-0049: Improper Privilege Management
Microsoft Exchange Server 2000 System Attendant gives "Everyone" group privileges to the WinReg key, which could allow remote attackers to read or modify registry keys...
CVE-2002-0080: Improper Privilege Management
rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed...