CVE-2012-3484: Undefined Security Weakness

Tunnelblick 3.3beta20 and earlier relies on a test for specific ownership and permissions to determine whether a program can be safely executed, which allows local users to bypass intended access restrictions and gain privileges via a 1 user-mountable image or 2 network share...

User Mountable NFS shares

It is possible to access the remote NFS shares without having root privileges. Description : Some of the NFS shares exported by the remote server could be mounted by the scanning host. An attacker may exploit this problem to gain read and possibly write access to files on remote host. Note that...

DESlock+ 3.2.6 - DLMFDISK.sys Local kernel Ring0 SYSTEM

DESlock+ 3.2.6 - DLMFDISK.sys Local kernel Ring0 SYSTEM / deslock-pown-v2.c Copyright c 2008 by DESlock+ include include include define DLKFDISKIOCTL 0x80002024 define DLKFDISKRIOCTL 0x80002010 define DLKFDISKSLOT 0x00000C5A define DLKFDISKOFFSET 0x0D define DLKFDISKDISKMAX 0x1A static unsigned...

NFS Share User Mountable

Nessus was either able to mount some of the NFS shares exported by the remote server or disclose potentially sensitive information such as a directory listing. An attacker may exploit this issue to gain read and possibly write access to files on remote host. Note that root privileges were not...

CVE-1999-0462

CVE-1999-0462 affects Linux Perl’s suidperl: it does not check the nosuid mount option on file systems, enabling a local user to gain root by placing a setuid script on a mountable filesystem (e.g., CD-ROM or floppy). Root cause: lack of nosuid validation on mounted media. Impact: local privilege...

CVE-1999-0462

suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountable file system, e.g. a CD-ROM or floppy disk...