573 matches found
CVE-1999-0782
KDE kppp is affected by CVE-1999-0782. Local users can create a directory in an arbitrary location by manipulating the HOME environment variable. The core issue is the use of HOME to determine user directories, enabling an attacker with local access to create files/directories outside their inten...
CVE-1999-0888
The CVE-1999-0888 entry concerns dbsnmp in Oracle Intelligent Agent. Local users can gain privileges by manipulating the ORACLE_HOME environment variable, which dbsnmp uses to locate the nmiconf.tcl script. The vulnerability affects the component responsible for Oracle Agent operations and has a ...
Dansie Shopping Cart 3.0.4 - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/1115/info Appending specific variables and values to http://target/cgi-bin/cart.pl? will allow remote users to perform certain actions. "vars" will display the configuration settings of the application, which includes the username and password used for...
CVE-1999-0733
Buffer overflow in VMWare 1.0.1 for Linux via a long HOME environmental variable...
CVE-2000-0230
Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable...
CVE-1999-0818
Buffer overflow in Solaris kcmsconfigure via a long NETPATH environmental variable...
CVE-1999-0863
Buffer overflow in FreeBSD seyon via HOME environmental variable, -emulator argument, -modems argument, or the GUI...
CVE-1999-0860
Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack...
CVE-1999-0863
CVE-1999-0863 concerns a buffer overflow in FreeBSD seyon. The vulnerability can be triggered via the HOME environment variable, the -emulator argument, the -modems argument, or the GUI, indicating an input-handling overflow in the SeYON component. Affected status/versions are not fully specified...
CVE-1999-0318
Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable...
CVE-1999-1327
Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG environmental variable...
CVE-1999-0863
Buffer overflow in FreeBSD seyon via HOME environmental variable, -emulator argument, -modems argument, or the GUI...
CVE-1999-0942
UnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE environmental variable to find a script which it executes...
CVE-1999-0046
Buffer overflow of rlogin program using TERM environmental variable...
CVE-1999-0906
Buffer overflow in sccw allows local users to gain root access via the HOME environmental variable...
CVE-1999-0769
Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable...
CVE-1999-0740
Remote attackers can cause a denial of service on Linux in.telnetd telnet daemon through a malformed TERM environmental variable...
Oracle 8 8.1.5 - Intelligent Agent (2)
// source: https://www.securityfocus.com/bid/585/info A vulnerability in the Oracle Intelligent Agent allows local malicious users to execute arbitrary commands and to create world writable files as the root user. The problem lies in the dbsnmp program located in $ORACLEHOME/bin . This setuid roo...