573 matches found
CVE-2000-0786
GNU userv 1.0.0 and earlier does not properly perform file descriptor swapping, which can corrupt the USERVGROUPS and USERVGIDS environmental variables and allow local users to bypass some access restrictions...
CVE-2000-0009
The CVE-2000-0009 entry concerns the bna_pass program in Optivity NETarchitect, which relies on the PATH environment variable to locate the rm program. This behavior allows local users to execute arbitrary commands due to how PATH is used, as described in the observed description. The available d...
CVE-2000-0537
BRU backup software allows local users to append data to arbitrary files by specifying an alternate configuration file with the BRUEXECLOG environmental variable...
CVE-2000-0617
Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via long USER environmental variable...
CVE-2000-0618
Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via long DISPLAY environmental variable...
CVE-2000-0393
The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain privileges by specifying an alternate program to execute...
CVE-2000-0411
Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the envreport parameter...
CVE-2000-0381
The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a non-existing database in the db parameter...
CVE-2000-0617
Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via long USER environmental variable...
CVE-1999-0754
The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmental variable...
CVE-2000-0393
The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain privileges by specifying an alternate program to execute...
CVE-2000-0411
Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the envreport parameter...
Matt Wright FormMail 1.61.71.8 - Environmental Variables Disclosure
Matt Wright FormMail 1.61.71.8 - Environmental Variables Disclosure source: https://www.securityfocus.com/bid/1187/info An unauthorized remote user is capable of obtaining CGI environmental variable information from a web server running Matt Wright FormMail by requesting a specially formed URL th...
PT-2000-1353 · Matt Wright · Matt Wright'S Formmail Cgi Script
Name of the Vulnerable Software and Affected Versions: Matt Wright's FormMail CGI script affected versions not specified Description: The issue allows remote attackers to obtain environmental variables via the env report parameter. This could potentially expose sensitive information about the...
Matt Wright FormMail 1.6/1.7/1.8 - Environmental Variables Disclosure
source: https://www.securityfocus.com/bid/1187/info An unauthorized remote user is capable of obtaining CGI environmental variable information from a web server running Matt Wright FormMail by requesting a specially formed URL that specifies the email address to send the details to. This is...
CVE-2000-0381
The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a non-existing database in the db parameter...
Gossamer Threads DBMan 2.0.4 - DBMan Information Leakage
Gossamer Threads DBMan 2.0.4 - DBMan Information Leakage source: https://www.securityfocus.com/bid/1178/info Requesting an invalid database file from a web server implementing Gossamer Threads DBMan scripts will return a CGI error message containing environmental variables to a remote user withou...
Gossamer Threads DBMan 2.0.4 - DBMan Information Leakage
source: https://www.securityfocus.com/bid/1178/info Requesting an invalid database file from a web server implementing Gossamer Threads DBMan scripts will return a CGI error message containing environmental variables to a remote user without any authorization. The parameters displayed include the...