CVE-2002-0225

tacplus Tacacs+ daemon F4.0.4.alpha, originally maintained by Cisco, creates files from the accounting directive with world-readable and writable permissions, which allows local users to access and modify sensitive files...

CVE-2002-0278

Directory traversal vulnerability in Add2it Mailman Free 1.73 and earlier allows remote attackers to modify arbitrary files via a .. dot dot in the list parameter...

CVE-2002-0271

Runtime library in GNU Ada compiler GNAT 3.12p through 3.14p allows local users to modify files of other users via a symlink attack on temporary files...

CVE-2002-0248

wmtv 0.6.5 and earlier allows local users to modify arbitrary files via a symlink attack on a configuration file...

[RHSA-2002:070-06] Updated mod_python packages available

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated modpython packages available Advisory ID: RHSA-2002:070-06 Issue date: 2002-04-22 Updated on: 2002-05-02 Product: Red Hat Linux Keywords: modpython publisher imported...

CVE-2002-0334: Undefined Security Weakness

xtell xtelld 1.91.1 and earlier, and 2.x before 2.7, allows local users to modify files via a symlink attack on the .xtell-log file...

CVE-2002-0271: Undefined Security Weakness

Runtime library in GNU Ada compiler GNAT 3.12p through 3.14p allows local users to modify files of other users via a symlink attack on temporary files...

CVE-2002-0278: Undefined Security Weakness

Directory traversal vulnerability in Add2it Mailman Free 1.73 and earlier allows remote attackers to modify arbitrary files via a .. dot dot in the list parameter...

CVE-2002-0248: Undefined Security Weakness

wmtv 0.6.5 and earlier allows local users to modify arbitrary files via a symlink attack on a configuration file...

CVE-2002-0145

chuid 1.2 and earlier does not properly verify the ownership of files that will be changed, which allows remote attackers to change files owned by other users, such as root...

CVE-2000-0551

The file transfer mechanism in Danware NetOp 6.0 does not provide authentication, which allows remote attackers to access and modify arbitrary files...

CVE-1999-1090

The default configuration of NCSA Telnet package for Macintosh and PC enables FTP, even though it does not include an "ftp=yes" line, which allows remote attackers to read and modify arbitrary files...

CVE-2000-1190: Undefined Security Weakness

imwheel-solo in imwheel package allows local users to modify arbitrary files via a symlink attack from the .imwheelrc file...

CVE-1999-1090: Undefined Security Weakness

The default configuration of NCSA Telnet package for Macintosh and PC enables FTP, even though it does not include an "ftp=yes" line, which allows remote attackers to read and modify arbitrary files...

CVE-2000-0551: Undefined Security Weakness

The file transfer mechanism in Danware NetOp 6.0 does not provide authentication, which allows remote attackers to access and modify arbitrary files...

CVE-2001-0407: Undefined Security Weakness

Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileges by creating a database whose name starts with .. dot dot...

Локальный DoS против Windows XP

Можифицировав файл .manifest можно привести к краху системы...

CVE-2001-0887

xSANE 0.81 and earlier allows local users to modify files of other xSANE users via a symlink attack on temporary files...

CVE-2001-0817

Vulnerability in HP-UX line printer daemon rlpdaemon in HP-UX 10.01 through 11.11 allows remote attackers to modify arbitrary files and gain root privileges via a certain print request...

CVE-2001-0817

The CVE-2001-0817 issue affects HP-UX rlpdaemon (line printer daemon) across HP-UX releases 10.01 through 11.11. The vulnerability is a remote/logic flaw in rlpdaemon that allows a crafted print request to create arbitrary files or directories and gain superuser privileges. Evidence from multiple...