CVE-2001-1564

setrlimit in HP-UX 10.01, 10.10, 10.24, 10.20, 11.00, 11.04 and 11.11 does not properly enforce core file size on processes after setuid or setgid privileges are dropped, which could allow local users to cause a denial of service by exhausting available disk space...

CVE-2005-1774

WEB-DAV Linux File System davfs2 0.2.3 does not properly enforce Unix permissions, which allows local users to write arbitrary files on a davfs2 mounted filesystem...

CVE-2004-0350

The CVE-2004-0350 entry affects the SpiderSales shopping cart, which does not enforce a minimum length for the private key. This weakens key material quality and can let local users obtain the private key by factoring, with an in‑the‑wild risk limited by local access and a low base score (2.1). T...

[UNIX] tHTTPd Virtual Hosting Security Hole (Host: ../..)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Microsoft Windows - Users Information : Can't Change Password

Using the supplied credentials, Nessus was able to list users who can not change their own passwords. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10896; scriptversion"1.20"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows - Users...

CVE-1999-1359

The CVE-1999-1359 entry concerns Windows NT where, when the Ntconfig.pol file is used on a server with a name longer than 13 characters, policies for global groups are not properly enforced. This could allow bypass of restrictions intended by those policies (as described in multiple sources). Aff...

CVE-1999-1359

When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enforce policies for global groups, which could allow users to bypass restrictions that were intended by those policies...

CVE-2000-0804

The vulnerability CVE-2000-0804 affects Check Point VPN-1/FireWall-1 4.1 and earlier. It is caused by a flaw in handling fragmented TCP connection requests or reopening closed one-way connections, allowing remote attackers to bypass the directionality check (One-way Connection Enforcement Bypass)...

CVE-2000-0813

Technical details about CVE-2000-0813 are not publicly provided in the connected documents you supplied. The materials do not specify affected products/versions beyond Check Point VPN-1/FireWall-1 4.1 and earlier, nor concrete remediation steps. Monitor for updates.

CVE-2000-0334

CVE-2000-0334 affects the Allaire Spectra container editor preview tool. The issue arises from improper enforcement of object security, permitting an attacker to perform unauthorized activities through an object-method added to the container object via a publishing rule. The documented impact is ...

CVE-1999-1358

When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the local ntconfig.pol is not writable by the user, which could allow local users to bypass restrictions that would otherwise be enforced by the policy, possibly by changing the policy...

CVE-1999-1359

When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enforce policies for global groups, which could allow users to bypass restrictions that were intended by those policies...

DUO-PSA-2020-003: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2020-003 Publication Date: 2020-06-30 Revision Date: 2020-06-30 Status: Confirmed, Fixed Document Revision: 2 Overview Duo has identified and fixed an issue in the Duo Connect client that allows end-users to choose insecure configurations. If...