6826 matches found
Microsoft Windows NT 4.04.0 SP14.0 SP24.0 SP34.0 SP44.0 SP5 - Help File Buffer Overflow
Microsoft Windows NT 4.04.0 SP14.0 SP24.0 SP34.0 SP44.0 SP5 - Help File Buffer Overflow // source: https://www.securityfocus.com/bid/261/info // // Lax permission in the Windows NT help file folder and a buffer overflow in the Help utility may allow malicious users to gain Administrator privilege...
AZL-7330 CVE-1999-0475 affecting package procmail 3.22-53
A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail...
CVE-1999-0410
The cancel command in Solaris 2.6 i386 has a buffer overflow that allows local users to obtain root access...
CVE-1999-0380
SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service RAS is enabled by setting a user's Finger File to point to the target file, then running finger on the user...
CVE-1999-1405
snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which could allow local users to access the shadowed password file by creating /tmp/ibmsupt/general/passwd before root runs snap...
CVE-1999-0371
Lynx allows a local user to overwrite sensitive files through /tmp symlinks...
CVE-1999-1159
SSH 2.0.11 and earlier allows local users to request remote forwarding from privileged ports without being root...
CVE-1999-1188
mysqld in MySQL 3.21 creates log files with world-readable permissions, which allows local users to obtain passwords for users who are added to the user database...
CVE-1999-1277
BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key, which could allow other local users to gain privileges by reading the password...
CVE-1999-1071
Excite for Web Servers EWS 1.1 installs the Architext.conf authentication file with world-writeable permissions, which allows local users to gain access to Excite accounts by modifying the file...
Linux Kernel 2.02.1 - Send a SIGIO Signal To Any Process
Linux Kernel 2.02.1 - Send a SIGIO Signal To Any Process / source: https://www.securityfocus.com/bid/111/info A vulnerability in the Linux kernel allows any user to send a SIGIO signal to any process. If the process does not catch or ignore the signal is will exit. / / On non-glibc systems you mu...
CVE-1999-1271
Macromedia Dreamweaver uses weak encryption to store FTP passwords, which could allow local users to easily decrypt the passwords of other users...
CVE-1999-0329
SGI mediad program allows local users to gain root access...
CVE-1999-1106
Buffer overflow in kppp in KDE allows local users to gain root access via a long -c accountname command line argument...
Solaris 7.0 - ufsdump Local Buffer Overflow (1)
Solaris 7.0 - ufsdump Local Buffer Overflow 1 // source: https://www.securityfocus.com/bid/680/info A buffer overflow vulnerability in the /usr/lib/fs/ufs/ufsdump setuid program allows local users to obtain root and tty group access. The vulnerability is the result of 'ufsdump' not being able to...
CVE-1999-1229
Quake 2 server 3.13 on Linux does not properly check file permissions for the config.cfg configuration file, which allows local users to read arbitrary files via a symlink from config.cfg to the target file...
CVE-1999-0087
Denial of service in AIX telnet can freeze a system and prevent users from accessing the server...
HP JetDirect rev. G.08.xrev. H.08.xx.08.xJ3111A - LCD Display Modification
HP JetDirect rev. G.08.xrev. H.08.xx.08.xJ3111A - LCD Display Modification / source: https://www.securityfocus.com/bid/2245/info Certain versions of HP JetDirect enabled printers provide a function PJL command that changes the LCD display on a printer over TCP/IP. Arbitrary strings can be sent to...
iCat Electronic Commerce Suite 3.0 - File Disclosure
source: https://www.securityfocus.com/bid/2126/info iCat Electronic Commerce Suite is an application which enables a user to create and manage web based catalogues. A remote user may retrieve known files on a target system running iCat Electronic Commerce Suite. The Carbo Server component of the...