CVE-2003-0365

ICQLite 2003a creates the ICQ Lite directory with an ACE for "Full Control" privileges for Interactive Users, which allows local users to gain privileges as other users by replacing the executables with malicious programs...

CVE-2003-0365

CVE-2003-0365 affects ICQLite 2003a, where the ICQ Lite directory is created with an ACE granting Full Control to Interactive Users. This permission allows local users to replace executables with malicious programs, enabling privilege escalation to other user accounts. The available sources descr...

CVE-2003-0365

ICQLite 2003a creates the ICQ Lite directory with an ACE for "Full Control" privileges for Interactive Users, which allows local users to gain privileges as other users by replacing the executables with malicious programs...

ICQ Lite weak permissions

During installation Interactive Users: Full Control permission is added to executables directory...

ASI Sybase Security Alert: Buffer overflow in DBCC CHECKVERIFY

Sybase Adaptive Server buffer overflow in DBCC CHECKVERIFY http://www.appsecinc.com/resources/alerts/sybase/02-0001.html To determine if you should apply this hot fix, download AppDetective for Sybase from http://www.sybasesecurity.net/products/appdetective/sybase/. Risk level: High Threat: Allow...

Windows 2000 system partition weak default permissions

Title: Windows 2000 system partition weak default permissions Affected: Windows 2000 Vendor: Microsoft Author: ZARAZA Date: August, 03 2002 Risk: High Exploitable: Yes Remote: No Vendor notified: May, 17 2002 SECURITY.NNOV URL: http://www.security.nnov.ru Advanced info:...

CVE-2001-0006

The CVE-2001-0006 issue affects Windows NT 4.0 (and Terminal Server Edition) where the Winsock2ProtocolCatalogMutex has insecure Everyone/Full Control permissions. This allows a local user to modify the ACL to “No Access,” effectively disabling Winsock network connectivity and causing a denial of...

ntsecurity.nu advisory: Winsock Mutex Vulnerability in Windows NT 4.0 SP6 and below

-- Winsock Mutex Vulnerability in Windows NT 4.0 SP6 and below -- Author: Arne Vidstrom [email protected] - http://ntsecurity.nu Severity: Denial Of Service if the attacker is able to execute the exploit code under any account on the system. Remote exploitation is not possible. Details:...

CVE-2000-1106

Trend Micro InterScan VirusWall creates an "Intscan" share to the "InterScan" directory with permissions that grant Full Control permissions to the Everyone group, which allows attackers to gain privileges by modifying the VirusWall programs...

TrendMicro InterScan VirusWall shared folder problem

I could not find any reference to this particular issue on bugtraq, and as it seems rather serious I decided to submit it. This message concerns what seems to be a security 'feature' in all versions of InterScan SMTP VirusWall for Windows NT at least through version 3.4. The problem is not with t...

cuartango-window.txt

Cuartango Window http://pages.whowhere.com/computers/cuartangojc/cuartangow1.html Affected software Microsoft Internet Explorer 4 Risks Your computer is at risk a malicious VBScript can get full control over your system. The VBScript can de everything : delete files, install viruses, read your...

CVE-1999-1555

Cheyenne InocuLAN Anti-Virus Server in Inoculan 4.0 before Service Pack 2 creates an update directory with "EVERYONE FULL CONTROL" permissions, which allows local users to cause Inoculan's antivirus update feature to install a Trojan horse dll...

Cheyenne Inoculan for Windows NT 4.0 - Share

Cheyenne Inoculan for Windows NT 4.0 - Share source: https://www.securityfocus.com/bid/106/info It is possible to run arbitrary code on any Intel machine running Cheyenne Inoculan version 4.0 for Windows NT prior to SP2. Inoculan runs as a service, called "Cheyenne InocuLAN Anti-Virus Server". Wh...

Cheyenne Inoculan for Windows NT 4.0 - Share

source: https://www.securityfocus.com/bid/106/info It is possible to run arbitrary code on any Intel machine running Cheyenne Inoculan version 4.0 for Windows NT prior to SP2. Inoculan runs as a service, called "Cheyenne InocuLAN Anti-Virus Server". When it starts, it replaces any shared director...

Network Associates PGP Keyserver 7.0 Administration Web Console Multiple Vulnerabilities

Advisory ID Internal CORE-2001-0813 Bugtraq ID: None currently assigned. CVE Name: None currently assigned. Title: Network Associates PGP Keyserver 7.0 Administration Web Console Multiple Vulnerabilities Class: Access Validation Error/Design Error Remotely Exploitable: Yes Locally Exploitable: Ye...