6759 matches found
FreeBSD-SA-00:15.imap-uw
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:15 Security Advisory FreeBSD, Inc. Topic: imap-uw allows local users to deny service to any mailbox Category: ports Module: imap-uw Announced: 2000-04-24 Credits: Alex...
Переполнение буфера в WU-IMAPD
Переполнение буфера в команде list "" buffer после авторизации пользователя. Пользователь не сможет повысить привелегии, но это позволяет пользователю имеющему только почтовый доступ получить шел-доступ к машине...
CVE-2000-0336
Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack...
SuSE Linux 6.x - Arbitrary File Deletion
SuSE Linux 6.x - Arbitrary File Deletion source: https://www.securityfocus.com/bid/1130/info A vulnerability exists in SuSE Linux, version 6.3 and prior, that can allow arbitrary users to delete any file on the system. If the MAXDAYSINTMP variable is set in /etc/rc.config to be larger than 0, any...
FreeBSD-SA-00:13.generic-nqs
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:13 Security Advisory FreeBSD, Inc. Topic: generic-nqs contains a local root compromise Category: ports Module: generic-nqs Announced: 2000-04-19 Credits: Philippe...
CVE-2000-0269
Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modify communications between Emacs and the subprocess...
CVE-2000-0250
The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords...
AVM KEN! 1.3.10/1.4.30 - Remote Denial of Service
source: https://www.securityfocus.com/bid/1103/info A remote user on the local network is capable of retrieving any known file from a machine running AVM KEN!. This is accomplished by appending ../ to a URL utilizing port 3128 to escape the regular web file structure, and appending the remaining...
CVE-2000-0210
The lit program in Sun Flex License Manager FlexLM follows symlinks, which allows local users to modify arbitrary files...
CRYPTOCard CRYPTOAdmin 4.1 - Weak Encryption (1)
CRYPTOCard CRYPTOAdmin 4.1 - Weak Encryption 1 // source: https://www.securityfocus.com/bid/1097/info CRYPTOCard CRYPTOAdmin is a network authentication application for use with the Palm OS platform. CRYPTOAdmin generates a .pdb file which contains the username, PIN number, serial number, and key...
Netscape PublishingXPert 2.02.22.5 - Local File Reading
Netscape PublishingXPert 2.02.22.5 - Local File Reading // source: https://www.securityfocus.com/bid/2920/info Netscape PublishingXpert is an e-commerce application distributed by Netscape. PublishingXpert manages user information, sending them special ads and personalized content. PSCOErrPage.ht...
CVE-1999-0786
The dynamic linker in Solaris allows a local user to create arbitrary files via the LDPROFILE environmental variable and a symlink attack...
gpm-root
Hi! I've sent report about the following security hole to the authors of gpm, but they seemed to ignore the problem. The problem applies to every gpm version known by me, for example 1.18.1 and 1.19.0. To exploit this problem, gpm-root must be running on a machine and the user needs both login to...
Fastraq Mailtraq 1.1.4 - Multiple Path Vulnerabilities
Fastraq Mailtraq 1.1.4 - Multiple Path Vulnerabilities source: https://www.securityfocus.com/bid/1278/info A remote user may browse any known directory on a host running Fastraq Mailtraq 1.1.4 by making a URL request that includes the '../' string. In addition, requesting a URL appended with "../...
Fastraq Mailtraq 1.1.4 - Multiple Path Vulnerabilities
source: https://www.securityfocus.com/bid/1278/info A remote user may browse any known directory on a host running Fastraq Mailtraq 1.1.4 by making a URL request that includes the '../' string. In addition, requesting a URL appended with "../" and an unusually long character string will return an...
Microsoft Windows NT 4.0 - User Shell Folders
Microsoft Windows NT 4.0 - User Shell Folders source: https://www.securityfocus.com/bid/1042/info The registry value HKEYLOCALMACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Common Startup specifies the shared startup folder for all users on a system. This key is set...
CVE-2000-0210
The lit program in Sun Flex License Manager FlexLM follows symlinks, which allows local users to modify arbitrary files...
CVE-2000-0143
The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP...
sco.snmpd.txt
====================================================================== Network Associates, Inc. SECURITY ADVISORY February 7, 2000 SNMPD default writable community string ====================================================================== SYNOPSIS The default configuration of SCO OpenServer...