7247 matches found
CVE-1999-1494
The CVE-1999-1494 entry concerns Silicon Graphics IRIX colorview on versions 5.1, 5.2, and 6.0. The vulnerability condition is local; an attacker can read arbitrary files by abusing the -text argument. The description does not provide affected product families beyond IRIX colorview, nor does it s...
CVE-2001-0741
Cisco Hot Standby Routing Protocol HSRP allows local attackers to cause a denial of service by spoofing HSRP packets...
Cisco PIX Firewall Manager stores enable password in plain text
Overview A vulnerability exists in the way the Cisco Pix Firewall Manager stores authentication credentials which could allow local attackers to have read access to the enable password for the Cisco Pix Firewall. Description The PIX Firewall Manager PFM is a software package designed to allow...
IBM AIX nslookup fails to drop root privileges
Overview The nslookup command fails to drop privileges, allowing local attackers to gain root privileges. Description The nslookup program fails to drop the privileges it gains from being setuid. This access appears to be needed to read the "/etc/resolv.conf" file. This problem was described in I...
IBM AIX nslookup buffer overflow in hostname to lookup
Overview There is a buffer overflow in nslookup that will allow local attackers to gain root privileges on vulnerable AIX systems. Description The nslookup command contains a buffer overflow in the hostname to lookup, allowing local attackers to gain root privileges. The vendor IBM has reported...
CVE-2001-0547
Memory leak in the proxy service in Microsoft Internet Security and Acceleration ISA Server 2000 allows local attackers to cause a denial of service resource exhaustion...
CVE-1999-1133
CVE-1999-1133 affects HP-UX 9.x and 10.x running X Windows. Local attackers can gain privileges via the unauthenticated components vuefile, vuepad, dtfile, or dtpad. The provided sources describe the vulnerable components and the privilege escalation vector but do not specify a patch or remediati...
CVE-1999-1077
The CVE-1999-1077 entry describes a local bypass in MacOS 9: the idle lock can be circumvented by triggering the programmers switch or CMD-PWR sequence, which brings up a debugger that disables the lock. Affected product: MacOS 9 idle sessions. Root cause: the idle locking mechanism can be bypas...
CVE-1999-1077
Idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the programmer's switch or CMD-PWR keyboard sequence, which brings up a debugger that the attacker can use to disable the lock...
CVE-1999-1497
Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts...
Solaris 2.678 (SPARC) - xlock Heap Overflow
Solaris 2.678 SPARC - xlock Heap Overflow // source: https://www.securityfocus.com/bid/3160/info Xlock is a utility for locking X-windows displays. It is installed setuid root because it uses the user's password to authorize access to the display when it is locked. The version of xlock that ships...
CVE-2001-0623
sendfiled, as included with Simple Asynchronous File Transfer SAFT, on various Linux systems does not properly drop privileges when sending notification emails, which allows local attackers to gain privileges...
CVE-2001-0623
sendfiled, as included with Simple Asynchronous File Transfer SAFT, on various Linux systems does not properly drop privileges when sending notification emails, which allows local attackers to gain privileges...
CVE-2001-0353
Buffer overflow in the line printer daemon in.lpd for Solaris 8 and earlier allows local and remote attackers to gain root privileges via a "transfer job" routine...
CVE-2001-0406
Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using 1 a printer queue query, 2 the more command in smbclient, or 3 the mput command in smbclient...
CVE-2000-0375
The CVE-2000-0375 issue affects the FreeBSD 3.2 kernel. The vulnerability arises because the kernel follows symbolic links when creating core dump files, due to improper handling of symlinks. This allows a local attacker to modify arbitrary files (integrity impact: partial) by exploiting core dum...
CVE-2001-0067
The installation of J-Pilot creates the .jpilot directory with the user's umask, which could allow local attackers to read other users' PalmOS backup information if their umasks are not securely set...
CVE-2001-0067
CVE-2001-0067 concerns the jpilot program, which creates a .jpilot directory in the user’s home with world-writable permissions (777). This insecure default enables local attackers to read other users’ PalmOS backups if umasks are not strictly set. Root cause is directory creation with permissive...