6894 matches found
CVE-2001-1178
Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable...
CVE-2001-1189
IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script...
CVE-2001-1122
CVE-2001-1122 affects Windows NT 4.0 SP 6a. A local user with write access to winnt/system32 can trigger a denial of service (crash of lsass.exe) by running the NT4ALL exploit in ‘SPECIAL’ mode. The issue is described as a local exploit with partial availability impact. The provided documents do ...
Microsoft Windows 'Administrators' Group User List
Using the supplied credentials, it is possible to extract the member list of the 'Administrators' group. Members of this group have complete access to the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10902; scriptversion"1.23"; scriptcvsdate"Date:...
[ARL02-A06] Black Tie Project System Information Path Disclosure Vulnerability
+/--------------- ALPER Research Labs -----/--------/+ +/--------------- Security Advisory ----/---------/+ +/--------------- ID: ARL02-A06 ---/----------/+ +/--------------- [email protected] --/-----------/+ Advisory Information -------------------- Name : Black Tie Project System Information...
[ARL02-A05] PHP FirstPost System Information Path Disclosure Vulnerability
+/--------------- ALPER Research Labs -----/--------/+ +/--------------- Security Advisory ----/---------/+ +/--------------- ID: ARL02-A05 ---/----------/+ +/--------------- [email protected] --/-----------/+ Advisory Information -------------------- Name : PHP FirstPost System Information Path...
CVE-2001-1037
Cisco SN 5420 Storage Router 1.13 and earlier allows local users to access a developer's shell without a password and execute certain restricted commands without being logged...
CVE-2001-0806
Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop when it is created in some languages...
CVE-1999-1138
The CVE affects SCO UNIX System V/386 Release 3.2 and other SCO products. Its description states that home directories are created under /tmp (dos user) and /usr/tmp (asg user), which are world-writable, enabling other users to access those accounts. The underlying issue is the use of world-writa...
CVE-2001-0416
CVE-2001-0416 affects sgml-tools (sgmltools) prior to version 1.0.9-15. The root cause is insecure handling of temporary files: sgml-tools creates temporary files directly (or in insecure permissions) which can allow other local users to read files being processed. Impact is partial confidentiali...
CVE-1999-1104
Windows 95 uses weak encryption for the password list .pwl file used when password caching is enabled, which allows local users to gain privileges by decrypting the passwords...
CVE-2001-0765
CVE-2001-0765 affects BisonFTP V4R1. The vulnerability allows local users to access directories outside their home directory by uploading .bdl files, which can then be linked to other directories. The impact is partial confidentiality, integrity, and availability (per the NVD entry, CVSSv2 base s...
CVE-1999-1146
CVE-1999-1146 : Vulnerability in the Glance and gpm programs of GlancePlus on HP-UX 9.x and earlier allows local users to access arbitrary files and gain privileges. The description does not specify affected versions beyond the HP-UX 9.x and earlier, nor provide explicit remediation steps. No exp...
CVE-2001-0371
Race condition in the UFS and EXT2FS file systems in FreeBSD 4.2 and earlier, and possibly other operating systems, makes deleted data available to user processes before it is zeroed out, which allows a local user to access otherwise restricted information...
CVE-1999-1402
The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to connect to the socket and possibly disrupt or control the operations of the program using that socket...
CVE-2000-0615
LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages to files...
CVE-2001-0366
The CVE-2001-0366 issue affects saposcol in SAP R/3 Web Application Server Demo prior to 1.5, where the process trusts the PATH environment variable to locate and execute the expand program. This design allows local users to escalate to root by altering PATH to point to a Trojan horse expand prog...
CVE-2001-0371
CVE-2001-0371 describes a race condition in the UFS and EXT2FS file systems affecting FreeBSD 4.2 and earlier (and possibly other operating systems). The vulnerability allows a local user to access data that has already been deleted but not yet zeroed out, leading to exposure of otherwise restric...
CVE-2001-0506
Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes SSI directive for a long filename, which triggers the overflow when the directory name is added, aka the "SSI privilege elevation" vulnerability...