CVE-2002-0721

Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated with helper functions, which could allow unprivileged users, and possibly remote attackers, to run stored procedures with administrator privileges via 1 xpexecresultset, 2...

CVE-2002-0721

The CVE-2002-0721 issue affects Microsoft SQL Server 7.0 and 2000 where extended stored procedures with weak permissions (xp_execresultset, xp_printstatements, xp_displayparamstmt) can allow an unprivileged user to execute procedures with administrator privileges. CERT advisories describe the ris...

Microsoft Windows 2000 Telnet Service allows unprivileged local users to terminate sessions via unprotected system calls

Overview The Microsoft Windows 2000 Telnet Service contains a denial-of-service vulnerability that allows unprivileged local users to terminate existing telnet sessions. Description The Microsoft Windows 2000 Telnet Service contains a vulnerability that allows unprivileged local users to execute...

mf.txt

Potential Root Compromise in MicroFocus Cobol Summary ------- If the AppTrack feature is enabled, the default install of MicroFocus Cobol 4.1 Merant's commercial suite of cobol utilities contains a security hole which can lead to root compromise. Specifics --------- In the default install,...

CVE-2000-0315

traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks...

CVE-2000-0315

Technical specifics (affected products, vulnerable components, root cause, and fixes) are not publicly provided in the connected documents. Monitor for updates.

Security Hole in Microfocus Cobol

Summary ------- If the AppTrack feature is enabled, the default install of MicroFocus Cobol 4.1 Merant's commercial suite of cobol utilities contains a security hole which can lead to root compromise. Specifics --------- In the default install, /var/mfaslmf is installed mode 777, and...

CVE-2001-0020

Directory traversal vulnerability in Arrowpoint aka Cisco Content Services, or CSS allows local unprivileged users to read arbitrary files via a .. dot dot attack...

Ports Security Advisory: FreeBSD-SA-01:21.ja-elvis

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:21 Security Advisory FreeBSD, Inc. Topic: ja-elvis and ko-helvis ports contain a local root compromise Category: ports Module: ja-elvis/ko-helvis Announced: 2001-02-07...

Itetris 1.6.1/1.6.2 - Privileged Arbitrary Command Execution

// source: https://www.securityfocus.com/bid/2139/info Itetris, or "Intelligent Tetris", is a clone of the popular Tetris puzzle game for linux systems. The svgalib version of Itetris is installed setuid root so that it may access video hardware when run by a regular user. Itetris contains a...

Ports Security Advisory: FreeBSD-SA-00:49.eject

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:49 Security Advisory FreeBSD, Inc. Topic: eject port allows local root exploit Category: ports Module: eject Announced: 2000-09-13 Affects: Ports collection. Corrected:...

Дырки в Subscribe Me/Account Manager

Непривелегированный пользователь может поменять пароль администратора...

Дырка в Sun AnswerBook2

Непривилигированные пользователи могут получить доступ к интерфейсу администрирования, а так же выполнять программный код на сервере...

FreeBSD-SA-00:28.majordomo

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:28 Security Advisory FreeBSD, Inc. Topic: majordomo is not safe to run on multi-user machines Category: ports Module: majordomo Announced: 2000-07-05 Affects: Ports...

FreeBSD-SA-00:27.XFree86-4

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:27 Security Advisory FreeBSD, Inc. Topic: XFree86-4.0 port contains local root overflow Category: ports Module: Xfree86-4 Announced: 2000-07-05 Credits: Michal Zalewski...

RUS-CERT.200004-01.txt

RUS-CERT Advisory 200004-01: GNU Emacs 20 RUS-CERT, University of Stuttgart 2000-04-18 Summary Several vulnerabilities were discovered in all Emacs versions up to 20.6, namely: Under certain circumstances, unprivileged local users can eavesdrop the communication between Emacs and its subprocesses...

CVE-2000-0143

Technical details for CVE-2000-0143 are not provided in the connected documents. The initial description notes local TCP redirection via sshd, but no vendor/versions/impact or fixes are specified beyond that. Monitor for updates.

solaris.7.procfs.dos.txt

Date: Tue, 9 Mar 1999 22:17:19 +0200 From: Toomas Soome To: [email protected] Subject: 64 bit Solaris 7 procfs bug hi! there is bug with 64 bit solaris 7 procfs, every nonprivileged user can crash computer with command 'more /proc/self/psinfo'. Tested with UE3000, U10, UE450. This bug has been...

netbsd.symlink-DoS.txt

Date: Tue, 13 Apr 1999 13:09:53 +1000 From: matthew green To: [email protected] Subject: NetBSD Security Advisory 1999-008 -----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 1999-008 ================================= Topic: Kernel hang or panic in name lookup under certain circumstanc...

Rational Software ClearCase for Unix 3.2 - ClearCase SUID

Rational Software ClearCase for Unix 3.2 - ClearCase SUID source: https://www.securityfocus.com/bid/538/info Rational Software's ClearCase product includes a vulnerability whereby an unprivileged user can have any readable executable set to SUID root.. A 1.5 meg file is copied and then chmod'ed t...