6761 matches found
CVE-2001-1578
Unknown vulnerability in SCO OpenServer 5.0.6 and earlier allows local users to modify critical information such as certain CPU registers and segment descriptors...
CVE-2001-1565
Point to Point Protocol daemon pppd in MacOS x 10.0 and 10.1 through 10.1.5 provides the username and password on the command line, which allows local users to obtain authentication information via the ps command...
CVE-2001-1189
IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script...
CVE-2001-0806
Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop when it is created in some languages...
CVE-2001-0831
Unknown vulnerability in Oracle Label Security in Oracle 8.1.7 and 9.0.1, when audit functionality, SETLABEL, or SQLPredicate is being used, allows local users to gain additional access...
CVE-2001-0833
Buffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 allows local users to execute arbitrary code via a long ORACLEHOME environment variable, aka the "Oracle Trace Collection Security Vulnerability."...
CVE-2001-0809
Vulnerability in CIFS/9000 Server SAMBA A.01.06 and earlier in HP-UX 11.0 and 11.11, when configured as a print server, allows local users to overwrite arbitrary files by modifying certain resources...
NAVCE 7.51 default permission exploit
============================================================ Topic: ===== Default NTFS permissions post-software install allow local user security context to modify "managed" Norton AntiVirus Corporate Edition 7.51 client configuration. Affected: ======== Norton AntiVirus Corporate Edition NAVCE...
CVE-2001-0916
Buffer overflow in Berkeley parallel make pmake 2.1.33 and earlier allows a local user to gain root privileges via a long check argument of a shell definition...
CVE-2001-1415
vi.recover in OpenBSD before 3.1 allows local users to remove arbitrary zero-byte files such as device nodes...
CVE-2001-0715
Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to obtain potentially sensitive information about the mail queue by setting debugging flags to enable debug mode...
Security Update: [CSSA-2001-SCO.26] dtterm argument buffer overflow
To: [email protected] [email protected] [email protected] [email protected] Do not reply to this mail. This security advisory is being sent from a nonexistent address in order to avoid spam problems. Caldera's contact address for UNIX security issue...
PostNuke 0.6 - User Login
PostNuke 0.6 - User Login source: https://www.securityfocus.com/bid/3435/info PostNuke, successor to PHPNuke, is a content management system written in PHP. PostNuke versions 0.62 to 0.64 suffer from a vulnerability that allows a remote user to log-in as any user with known username and ID withou...
CVE-2001-1281
Web Messaging Server for Ipswitch IMail 7.04 and earlier allows remote authenticated users to change information for other users by modifying the olduser parameter in the "Change User Information" web form...
Ipswitch Imail 7.04 vulnerabilities
Hi all, Below are vulnerabilities I have found in Imail Ipswitch.com. Some of them can be very dangerous and it is there for recommended that Imail users upgrade their software asap. After reporting these vulnerabilities to Ipswitch on the 4e of this month it only took 7 days before Ipswitch...
CVE-2001-1098
Cisco PIX firewall manager PFM 4.32g logs the enable password in plaintext in the pfm.log file, which could allow local users to obtain the password by reading the file...
FreeBSD-SA-01:62.uucp
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:62 Security Advisory FreeBSD, Inc. Topic: UUCP allows local root exploit Category: core Module: uucp Announced: 2001-10-08 Credits: [email protected] Affects: All release...
CVE-2001-1255
WinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local users to obtain unathorized access the MySQL database...
Vulnerability in SpoonFTP
-----BEGIN PGP SIGNED MESSAGE----- Vulnerability in SpoonFTP Overview SpoonFTP v1.1 is an ftp server available from http://www.pi-soft.com/. A vulnerability exists which allows a remote user to break out of the ftp root. Details The following excerpt demonstrates the problem; an ftp root of...
