CVE-2005-1473

CVE-2005-1473 affects Apple Mac OS X 10.4.1 where SecurityAgent can be triggered by a URL opened from a text input field, allowing attackers with physical access to bypass the locked screensaver and launch background applications. The Red Hat/NVD entries confirm the same behavior. The vulnerabili...

CVE-2005-0078

The KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain function call, which allows attackers with physical access to cause a crash and access the desktop session...

CVE-2001-1436

Dallas Semiconductor iButton DS1991 returns predictable values when given an incorrect password, which makes it easier for users with physical access to conduct dictionary attacks against the device password...

FreeBSD amd64 platform privilege escalation

Userland process can access phisical hardware...

[Full-disclosure] Multiple Vulnerabilities of PY Software Active Webcam WebServer

Multiple Vulnerabilities of PY Software Active Webcam WebServer By Sowhat 04.Jan.2005 http://secway.org/advisory/ad20050104.txt Product: PY Software Active Webcam 5.5 Vendor: PY Software, Inc. 1 Introduction Active WebCam is a popular shareware program for capturing video streams from video devic...

CVE-2004-1038

A design error in the IEEE1394 specification allows attackers with physical access to a device to read and write to sensitive memory using a modified FireWire/IEEE 1394 client, thus bypassing intended restrictions that would normally require greater degrees of physical access to exploit. NOTE: th...

CVE-2004-1038

A design error in the IEEE1394 specification allows attackers with physical access to a device to read and write to sensitive memory using a modified FireWire/IEEE 1394 client, thus bypassing intended restrictions that would normally require greater degrees of physical access to exploit. NOTE: th...

CVE-2005-0078

The KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain function call, which allows attackers with physical access to cause a crash and access the desktop session...

CVE-2005-0078

CVE-2005-0078 affects KDE screensaver (kscreensaver) prior to KDE 3.0.5. The issue stems from not properly checking the return value of a function call, enabling a local attacker with physical access to cause a crash and potentially take over a locked desktop session. Public sources note upstream...

[SECURITY] [DSA 660-1] New kdebase packages fix authentication bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 660-1 [email protected] http://www.debian.org/security/ Martin Schulze January 26th, 2005 http://www.debian.org/security/faq -...

CVE-2004-1193

Prevx Home 1.0 allows local users with administrator privileges to bypass the intrusion prevention features by directly writing to \device\physicalmemory, which restores the running kernel's original SDT ServiceTable...

F-Secure Policy Manager Path Disclosure

The remote host is running F-Secure Policy Manager, a distributed administration software allowing a system administrator to control applications from a single web console. There is a flaw in the file '/fsms/fsmsh.dll' that discloses the physical path this application is under. An attacker could...

Linux Kernel 2.4.x/2.6.x - Local Denial of Service / Memory Disclosure

source: https://www.securityfocus.com/bid/11754/info The Linux kernel is reported prone to multiple local vulnerabilities: - A handcrafted 'a.out' file may be used to trigger a local denial-of-service condition. A local attacker may exploit this vulnerability to trigger a system-wide denial of...

PrevX protection bypass

Protection can be bypassed by direct physical memory access...

CVE-2004-1038

CVE-2004-1038 describes a design error in the IEEE1394 (FireWire) specification that can allow attackers with physical access to read/write sensitive memory via a modified FireWire client, bypassing intended access restrictions. The issue is a local vulnerability in the FireWire stack that could ...

CVE-2004-1038

A design error in the IEEE1394 specification allows attackers with physical access to a device to read and write to sensitive memory using a modified FireWire/IEEE 1394 client, thus bypassing intended restrictions that would normally require greater degrees of physical access to exploit. NOTE: th...

EEYE: Kerio Personal Firewall Multiple IP Options Denial of Service

Kerio Personal Firewall Multiple IP Options Denial of Service Release Date: November 9, 2004 Date Reported: October 30, 2004 Severity: High Remote Denial of Service Vendor: Kerio Systems Affected: Kerio Personal Firewall 4.1.1 and prior Overview: eEye Digital Security has discovered a severe deni...

xtrlock -- X display locking bypass

The X display locking program xtrlock contains an integer overflow bug. It is possible for an attacker with physical access to the system to bypass the display lock...

CVE-2002-0673

The enrollment process for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to the phone to log out the current user and re-register the phone using MyPingtel Sign-In to gain remote access and perform unauthorized actions...

CVE-1999-1397

Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key, whose permissions allows local and remote users to obtain the physical paths of directories that are being indexed...