CVE-1999-1325

Summary (CVE-1999-1325): SAS System 5.18 running on VAX/VMS is installed with insecure permissions on its directories and startup file, enabling local users to gain privileges. The entry is rated CVSS v2 base score 7.2 (HIGH) with local attack vector and no authentication required; impact is conf...

CVE-1999-1120

The vulnerability CVE-1999-1120 affects SGI IRIX 6.4 and earlier where netprint trusts the PATH environment variable to locate and execute the disable program. This trust allows local users to gain privileges. Documented impact indicates local privilege escalation; exploitation details are not pr...

CVE-2002-0012: Undefined Security Weakness

Vulnerabilities in a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via SNMPv1 trap handling, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one...

CVE-2001-0910

CVE-2001-0910 affects Legato NetWorker prior to 6.1, where remote attackers could bypass access restrictions and gain privileges on the Networker interface by spoofing the admin server name and IP, then connecting from an IP address whose hostname cannot be determined via reverse DNS. The provide...

CVE-2001-0858

CVE-2001-0858 describes a buffer overflow in pppattach and other linked PPP utilities on Caldera Open UNIX 8.0 and UnixWare 7.1.0/7.1.1. The root cause is an overflow in these PPP-related components, enabling local privilege escalation. Affected products and versions are explicitly listed in the ...

CVE-2001-0412

CVE-2001-0412 affects Cisco Content Services (CSS) switch products 11800 and earlier (Arrowpoint). The vulnerability allows a local user to gain privileges by entering debug mode, with a CVSSv2 base score of 7.2 (HIGH): local attack vector, low complexity, no authentication, andComplete impact on...

CVE-1999-1353

CVE-1999-1353 affects Nosque MsgCore 2.14, where passwords are stored in cleartext: admin password in the AdmPasswd registry key and user passwords in the Userbase.dbf data file. This could allow local users to gain privileges. The connected documents provide the vulnerability description and imp...

CVE-1999-1311

Technical details (affected components, versions, exploitation, and fixes) are not publicly provided in the supplied documents. The initial description notes a local privilege bypass in HP-UX 10.20/10.10 via dtlogin/dtsession; monitor for updates.

CVE-1999-1101

CVE-1999-1101 concerns the Kabsoftware Lydia utility, which stores user passwords in the lydia.ini file using weak encryption. This storage method allows local users to decrypt the passwords and potentially gain privileges. The root cause, as described, is the weak encryption used for password st...

CVE-2001-0193

CVE-2001-0193 describes a format-string vulnerability in the man page viewer, observed in some Linux distributions via the -l parameter, enabling local privilege escalation. Connected documents identify Debian as affected via the man-db package and reference Debian Security Advisory DSA-028-1, wh...

CVE-2001-0281

CVE-2001-0281 concerns a format-string vulnerability in the DbgPrint debugging function used by some Windows NT drivers (potentially via DebugMessage). The flaw could allow local attackers to gain privileges. Documents identify the affected component as Windows NT drivers and the vulnerability as...

FreeBSD-SA-01:06.zope

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:06 Security Advisory FreeBSD, Inc. Topic: zope vulnerability allows escalation of privileges Category: ports Module: zope Announced: 2001-01-15 Credits: Erik Enge Affects...

CVE-2000-0955

CVE-2000-0955 affects Cisco Virtual Central Office 4000 (VCO/4K). The issue is weak encryption used to store usernames and passwords in the SNMP MIB, enabling an attacker who knows the community name to crack credentials and gain privileges. According to the NVD entry, this yields a CVSS v2 base ...

CVE-2000-0755

Vulnerability CVE-2000-0755 affects HP-UX 11.00 in the newgrp command, enabling local privilege escalation. The connected records confirm the affected product (HP-UX 11.00) and the vulnerable component (newgrp), with the impact described as local privilege gain. The exact root cause, exploitation...

CVE-2000-0083

CVE-2000-0083 describes a vulnerability in HP asecure where the Audio Security File audio.sec is created with insecure permissions. This local-privilege issue can allow an unprivileged local user to cause a denial of service or gain additional privileges. The associated NVD entry specifies a loca...

CVE-1999-0853: Undefined Security Weakness

Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure...

CVE-1999-0084

CVE-1999-0084 affects certain NFS servers . The vulnerability permits a local user to perform a privileged action by running mknod to create a writable kmem device and set the UID to 0, effectively enabling a privilege escalation to root as described in the provided sources. Multiple connected do...

PT-2008-6879 · Gnu +1 · Libc6 +2

Name of the Vulnerable Software and Affected Versions: glibc versions prior to 2.11.2 libc6 versions prior to 2.11.2 libc6-dev versions prior to 2.11.2 glibc-2.3.4 glibc-profile-2.3.4 glibc-headers-2.3.4 glibc-utils-2.3.4 glibc-common-2.3.4 glibc-devel-2.3.4 glibc-debuginfo glibc-profile-64bit...