468 matches found
kernel: Missing ioctl() permission checks in aacraid driver
The 1 aaccfgopen and 2 aaccompatioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges...
Design/Logic Flaw
ZoneAlarm Pro 7.0.362.000 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to cause a denial of service crash and possibly gain privileges via the 1 NtCreatePort and 2 NtDeleteFile kernel SSDT hooks, a partial...
CIFS should honor umask
The CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled, does not honor the umask of a process, which allows local users to gain privileges...
CVE-2006-7152
CVE-2006-7152 affects ASP-Nuke Community
PT-2007-1569 · Microsoft · Windows Nt Message Compiler
Name of the Vulnerable Software and Affected Versions: Windows NT Message Compiler version 1.00.5239 Description: A buffer overflow issue in the Windows NT Message Compiler allows local users to potentially gain privileges via a long MC-filename. However, this issue has been disputed by a reliabl...
security flaw
Unspecified vulnerability in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to gain privileges and install malicious code via the watch Javascript function...
security flaw
EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges via javascript that calls the valueOf method on objects that were created outside of the sandbox...
CVE-2006-3601
UNVERIFIABLE Unspecified vulnerability in an unspecified DNN Modules module for DotNetNuke .net nuke allows remote attackers to gain privileges via unspecified vectors, as used in an attack against the Microsoft France web site. NOTE: due to the lack of details and uncertainty about which product...
Touch arbitrary file execute vulnerability
Title: Touch arbitrary file execute vulnerability Version: Touch Control 2, 0, 0, 55 Discoverer: PARK, GYU TAE [email protected] Advisory No.: NRVA06-04 Critical: Critical Impact: Gain remote user's privilege Where: From remote Operating System: Windows Only Solution: Patched Notice: 16. 06...
CentOS 3 : kernel (CESA-2006:0140)
Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...
CVE-2006-2522
Dayfox Blog 2.0 and earlier stores user credentials in edit/slogusers.txt under the web document root with insufficient access control, which allows remote attackers to gain privileges...
PT-2006-2543 · Python · Python
Name of the Vulnerable Software and Affected Versions: Python versions 2.4.2 and earlier Description: A stack-based buffer overflow issue allows local users to cause a stack overflow, and possibly gain privileges, by running a script from a current working directory with a long name. This is...
security flaw
umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r remount option, which causes the file system to be remounted with just the read-only flag, which effectively clears the...
Important: Red Hat Security Advisory: kernel security update
Updated kernel packages are now available to correct security issues and bugs for Red Hat Enterprise Linux version 2.1 Itanium. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...
security flaw
Format string vulnerability in the protoitemsettext function in Ethereal 0.9.4 through 0.10.11, as used in multiple dissectors, allows remote attackers to write to arbitrary memory locations and gain privileges via a crafted AFP packet...
VulnCheck KEV: CVE-2005-1983
Stack-based buffer overflow in the Plug and Play PnP service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob aka Mytob worm...
CVE-2001-1562
CVE-2001-1562 affects the nvi editor; it is a format string vulnerability in which, before version 1.79, local users could gain privileges via format specifiers embedded in a filename. The Debian advisory DSA-085-1 and OpenVAS entries reiterate that nvi (and nvi-m17n) needed updates to address th...
CVE-2001-1367
The CVE-2001-1367 entry concerns PHPSlice, specifically the checkAccess function. Affected versions 0.1.1 through 0.1.6 (including 0.1.4) do not properly verify administrative access level, enabling remote attackers to gain privileges. Documented impact is privilege escalation. A temporary mitiga...
MS ASN library is fraught not only with integer overflow, but also with stack overflow.
MS ASN library is fraught not only with integer overflow, but also with stack overflow. After eEye published the vulnerability with ASN library, many people discussed it, and focused on whether we can exploit it and gain privilege. Theoretically speaking, we can gain privilege, but in fact, it's...