6760 matches found
CVE-2000-0795
Buffer overflow in lpstat in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long -n option...
CVE-1999-0380
CVE-1999-0380 affects SLMail 3.1 and 3.2. When Remote Administration Service (RAS) is enabled, an attacker can point a user’s Finger File to a target file and, after running finger, access NTFS files locally. The underlying cause is the Finger service handling a user file reference insecurely, en...
CVE-2001-0416
CVE-2001-0416 affects sgml-tools (sgmltools) prior to version 1.0.9-15. The root cause is insecure handling of temporary files: sgml-tools creates temporary files directly (or in insecure permissions) which can allow other local users to read files being processed. Impact is partial confidentiali...
CVE-2001-0641
Buffer overflow in man program in various distributions of Linux allows local user to execute arbitrary code as group man via a long -S option...
CVE-1999-1104
Windows 95 uses weak encryption for the password list .pwl file used when password caching is enabled, which allows local users to gain privileges by decrypting the passwords...
CVE-2001-1037
Cisco SN 5420 Storage Router 1.13 and earlier allows local users to access a developer's shell without a password and execute certain restricted commands without being logged...
CVE-2001-0549
Symantec LiveUpdate 1.5 stores proxy passwords in cleartext in a registry key, which could allow local users to obtain the passwords...
CVE-2001-0506
Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes SSI directive for a long filename, which triggers the overflow when the directory name is added, aka the "SSI privilege elevation" vulnerability...
CVE-2001-0806
Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop when it is created in some languages...
CVE-1999-1138
The CVE affects SCO UNIX System V/386 Release 3.2 and other SCO products. Its description states that home directories are created under /tmp (dos user) and /usr/tmp (asg user), which are world-writable, enabling other users to access those accounts. The underlying issue is the use of world-writa...
pforum: mysql-injection-bug
ppp-design has found a mysql-injection-bug in pforum: Details ------- Product: pforum Version: 1.14 and maybe all versions before OS affected: all OS with php and mysql Vendor-URL: www.powie.de Vendor-Status: informed, workaround available Security-Risk: Medium-High Remote-Exploit: Yes Introducti...
[SECURITY] [DSA 112-1] New hanterm packages fix buffer overflow
-------------------------------------------------------------------------- Debian Security Advisory DSA 112-1 [email protected] http://www.debian.org/security/ Martin Schulze February 16th, 2002 - -------------------------------------------------------------------------- Package : hanterm...
[SECURITY] [DSA 079-2] New UUCP packages finally fix uucp uid/gid access
-------------------------------------------------------------------------- Debian Security Advisory DSA 079-2 [email protected] http://www.debian.org/security/ Martin Schulze February 8th, 2002 - -------------------------------------------------------------------------- Package : uucp...
OS/400 - User Account Name Disclosure
source: https://www.securityfocus.com/bid/4059/info AS/400 is a midrange computer platform developed by IBM. It is designed to be highly reliable and efficient, and uses the OS/400 operating system. An information disclosure vulnerability has been reported to exist in OS/400 systems. An...
CVE-2001-0990
Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into the libvpopmail.a library, which allows local users to obtain the MySQL username and password by inspecting the vpopmail programs that use the library...
Intel WLAN Driver storing 128bit WEP-Key in plain text!
Intro: while doing some troubleshoting i found a bug on a compaq evo n600c, with an integrated 802.11b card connected via usb on the back of the display running as IntelR PRO/Wireless 2011B LAN USB Device. Description: the WEP-Key ist stored plain to the registry. the permission the the specific...
rsync 2.3/2.4/2.5 - Signed Array Index Remote Code Execution
// source: https://www.securityfocus.com/bid/3958/info A vulnerability exists within some versions of rsync. Under some circumstances, a remotely supplied signed value is used as an array index, allowing NULL bytes to be written to arbitrary memory locations. Exploitation of this vulnerability...
Solaris in.telnetd TTYPROMPT Buffer Overflow
漏洞描述：Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris 10的TELNET服务在处理畸形的认证数据时存在漏洞，远程攻击者可能利用此漏洞绕过认证获得访问。 Solaris...
