6760 matches found
CVE-1999-1159
SSH 2.0.11 and earlier allows local users to request remote forwarding from privileged ports without being root...
CVE-1999-1188
mysqld in MySQL 3.21 creates log files with world-readable permissions, which allows local users to obtain passwords for users who are added to the user database...
CVE-1999-1277
BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key, which could allow other local users to gain privileges by reading the password...
CVE-1999-1071
Excite for Web Servers EWS 1.1 installs the Architext.conf authentication file with world-writeable permissions, which allows local users to gain access to Excite accounts by modifying the file...
Linux Kernel 2.02.1 - Send a SIGIO Signal To Any Process
Linux Kernel 2.02.1 - Send a SIGIO Signal To Any Process / source: https://www.securityfocus.com/bid/111/info A vulnerability in the Linux kernel allows any user to send a SIGIO signal to any process. If the process does not catch or ignore the signal is will exit. / / On non-glibc systems you mu...
CVE-1999-1271
Macromedia Dreamweaver uses weak encryption to store FTP passwords, which could allow local users to easily decrypt the passwords of other users...
CVE-1999-0329
SGI mediad program allows local users to gain root access...
CVE-1999-1106
Buffer overflow in kppp in KDE allows local users to gain root access via a long -c accountname command line argument...
Solaris 7.0 - ufsdump Local Buffer Overflow (1)
Solaris 7.0 - ufsdump Local Buffer Overflow 1 // source: https://www.securityfocus.com/bid/680/info A buffer overflow vulnerability in the /usr/lib/fs/ufs/ufsdump setuid program allows local users to obtain root and tty group access. The vulnerability is the result of 'ufsdump' not being able to...
CVE-1999-1229
Quake 2 server 3.13 on Linux does not properly check file permissions for the config.cfg configuration file, which allows local users to read arbitrary files via a symlink from config.cfg to the target file...
CVE-1999-0087
Denial of service in AIX telnet can freeze a system and prevent users from accessing the server...
HP JetDirect rev. G.08.xrev. H.08.xx.08.xJ3111A - LCD Display Modification
HP JetDirect rev. G.08.xrev. H.08.xx.08.xJ3111A - LCD Display Modification / source: https://www.securityfocus.com/bid/2245/info Certain versions of HP JetDirect enabled printers provide a function PJL command that changes the LCD display on a printer over TCP/IP. Arbitrary strings can be sent to...
iCat Electronic Commerce Suite 3.0 - File Disclosure
source: https://www.securityfocus.com/bid/2126/info iCat Electronic Commerce Suite is an application which enables a user to create and manage web based catalogues. A remote user may retrieve known files on a target system running iCat Electronic Commerce Suite. The Carbo Server component of the...
CVE-1999-0327
SGI syserr program allows local users to corrupt files...
CVE-1999-0092
Various vulnerabilities in the AIX portmir command allows local users to obtain root access...
CVE-1999-0295
Solaris sysdef command allows local users to read kernel memory, potentially leading to root privileges...
CVE-1999-0965
Race condition in xterm allows local users to modify arbitrary files via the logging option...
CVE-1999-0064
Buffer overflow in AIX lquerylv program gives root access to local users...
Microsoft Windows NT 4.0 SP5 Terminal Server 4.0 - Pass the Hash with Modified SMB Client
Microsoft Windows NT 4.0 SP5 Terminal Server 4.0 - Pass the Hash with Modified SMB Client source: https://www.securityfocus.com/bid/233/info A modified SMB client can mount shares on an SMB host by passing the username and corresponding LanMan hash of an account that is authorized to access the...