CVE-2002-2382

cvsupd.sh in CVSup 1.2 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on /var/tmp/cvsupd.out...

CVE-2002-2244

Akfingerd 0.5 and earlier versions allow local users to cause a denial of service crash via a .plan with a symlink to /dev/urandom or other device, then disconnecting while data is being transferred, which causes a SIGPIPE error that Akfingerd cannot handle...

CVE-2002-1319

The Linux kernel 2.4.20 and earlier, and 2.5.x, when running on x86 systems, allows local users to cause a denial of service hang via the emulation mode, which does not properly clear TF and NT EFLAGs...

Multiple vulnerabilities in akfingerd

INSERT ASCII BANNER AND ADVERTISING HERE PRODUCT. akfingerd http://synflood.at/akfingerd/ EXPLOIT-ID. ECSC Ltd. Official K-R4d E-Security Advertisory. KR4D-VULN-ID-0-000-000-000-000-000-000-000-001 IMPORTANT SOUNDING DESCRIPTION. Akfingerd is a 'secure' finger server used by noone blah blah...

CVE-2002-1587

The libthread library libthread.so.1 for Solaris 2.5.1 through 8 allows local users to cause a denial of service hang of an application that uses libthread by causing the application to wait for a certain mutex...

CVE-2002-1586

Solaris 2.5.1 through 9 allows local users to cause a denial of service kernel panic by setting the sdstruiowrq variable in the struioget function to null, which triggers a null dereference...

CVE-2002-1313

nullmailer 1.00RC5 and earlier allows local users to cause a denial of service via an email to a local user that does not exist, which generates an error that causes nullmailer to stop sending mail to all users...

CVE-2002-0915

autorun in Xandros based Linux distributions allows local users to read the first line of arbitrary files via the -c parameter, which causes autorun to print the first line of the file...

NetBSD Security Advisory 2002-010: symlink race in pppd

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2002-010 ================================= Topic: symlink race in pppd Version: NetBSD-current: source prior to July 31, 2002 NetBSD-1.6 beta: affected NetBSD-1.5.3: affected NetBSD-1.5.2: affected NetBSD-1.5.1: affected NetBSD-1.5:...

Cisco VPN 5000 Client - Buffer Overrun (1)

// source: https://www.securityfocus.com/bid/5734/info Buffer overrun vulnerabilities have been reported in the Cisco VPN 5000 UNIX clients available for Linux and Solaris systems. The condition affects the binaries 'closetunnel' and 'opentunnel', both installed setuid root by default. Malicious...

BRU 17.0 - XBRU Insecure Temporary File

source: https://www.securityfocus.com/bid/5708/info BRU is a backup and restore utility distributed by The Tolis Group. This problem affects the utility on the Linux platform. xbru does not properly check for the existence of temporary files prior to execution. Because of this, it is possible for...

CVE-2002-0720

A handler routine for the Network Connection Manager NCM in Windows 2000 allows local users to gain privileges via a complex attack that causes the handler to run in the LocalSystem context with user-specified code...

CVE-2002-0901

Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver AMANDA 2.3.0.4 allow 1 remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certain local users to execute arbitrary code via long command line arguments to the programs 2 amcheck, 3...

MS02-042: Flaw in Network Connection Manager Could Enable Privilege Elevation (326886)

The remote host contains a flaw in the Network Connection Manager that may allow a local user to elevate his privileges. To exploit this vulnerability, a user needs to send a specially- crafted code to the Network Manager handle to execute arbitrary code with the privileges of the SYSTEM. C Tenab...

CVE-2002-0424

efingerd 1.61 and earlier, when configured without the -u option, executes .efingerd files as the efingerd user typically "nobody", which allows local users to gain privileges as the efingerd user by modifying their own .efingerd file and running finger...

CVE-2002-0795

The rc system startup script for FreeBSD 4 through 4.5 allows local users to delete arbitrary files via a symlink attack on X Windows lock files...

Critical: Red Hat Security Advisory: openssl, mm security update for Stronghold

Updated Apache packages are available which fix several serious buffer overflow vulnerabilities in OpenSSL and a local privilege escalation vulnerability in MM. Note: Please read the "Solution" section below as there are special upgrade instructions for this errata. ----------- OpenSSL is a...

CVE-2001-1384

ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or setgid program that itself calls an unprivileged program, such as newgrp...

FreeBSD-SA-02:32.pppd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:32.pppd Security Advisory The FreeBSD Project Topic: exploitable race condition in pppd Category: core Module: pppd Announced: 2002-07-31 Credits: Sebastian Krahmer...

CVE-2002-0435

Race condition in the recursive 1 directory deletion and 2 directory move in GNU File Utilities fileutils 4.1 and earlier allows local users to delete directories as the user running fileutils by moving a low-level directory to a higher level as it is being deleted, which causes fileutils to chdi...