Sendmail restricted shell (smrsh) protection bypass

Unescaped shell characters allows to execute commands...

CVE-2002-0875

Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group...

CVE-2002-0858

catsnmp in Oracle 9i and 8i is installed with a dbsnmp user with a default dbsnmp password, which allows attackers to perform restricted database operations and possibly gain other privileges...

DEBIAN-CVE-2002-0875

Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group...

CVE-2002-0993

HP Instant Support Enterprise Edition (ISEE) U2512A on HP-UX 11.00/11.11 has an unknown vulnerability allowing authenticated users to access restricted files. The available records identify the affected software and the access impact but do not provide technical details on root cause, vulnerable ...

CVE-2002-0993

Unknown vulnerability in HP Instant Support Enterprise Edition ISEE product U2512A for HP-UX 11.00 and 11.11 may allow authenticated users to access restricted files...

CVE-2002-0858

catsnmp in Oracle 9i and 8i is installed with a dbsnmp user with a default dbsnmp password, which allows attackers to perform restricted database operations and possibly gain other privileges...

RedHat Interchange 4.8.x - Arbitrary File Read

RedHat Interchange 4.8.x - Arbitrary File Read source: https://www.securityfocus.com/bid/5453/info A vulnerability has been reported for Interchange 4.8.5 and earlier. Reportedly, Interchange may disclose contents of files to attackers. The vulnerability occurs due to the placement of the 'doc'...

RedHat Interchange 4.8.x - Arbitrary File Read

source: https://www.securityfocus.com/bid/5453/info A vulnerability has been reported for Interchange 4.8.5 and earlier. Reportedly, Interchange may disclose contents of files to attackers. The vulnerability occurs due to the placement of the 'doc' folder. Reportedly, the folder will be installed...

CVE-2002-0803

Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows remote attackers to display restricted products and components via a direct HTTP request to queryhelp.cgi...

CVE-2002-0803

The CVE-2002-0803 issue affects Bugzilla where versions 2.14 before 2.14.2 and 2.16 before 2.16rc2 allow remote attackers to disclose restricted products and components through a direct HTTP request to queryhelp.cgi. Root cause is improper access control on the queryhelp.cgi endpoint, enabling in...

CVE-2002-0803

Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows remote attackers to display restricted products and components via a direct HTTP request to queryhelp.cgi...

CVE-2002-0433

Pi3Web 2.0.0 allows remote attackers to view restricted files via an HTTP request containing a "" wildcard or asterisk character...

Login errors in 1.3

When logging in as our special user who is restricted to one certain project, I get this error message from secure/Dashboard.jspa java.lang.IllegalArgumentException: Source may not be null at webwork.util.SubsetIteratorFilter.setSourceSubsetIteratorFilter.java:33 at...

Login errors in 1.3

When logging in as our special user who is restricted to one certain project, I get this error message from secure/Dashboard.jspa java.lang.IllegalArgumentException: Source may not be null at webwork.util.SubsetIteratorFilter.setSourceSubsetIteratorFilter.java:33 at...

CVE-2002-0571

Oracle Oracle9i database server 9.0.1.x allows local users to access restricted data via a SQL query using ANSI outer join syntax...

CVE-2002-0080

rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed...

CVE-2001-1166

The CVE-2001-1166 entry concerns linprocfs on FreeBSD 4.3 and earlier that does not properly restrict access to kernel memory. The vulnerability enables a process with debugging rights on a privileged process to read restricted memory from that process. Affected component: linprocfs in FreeBSD; r...

CVE-2002-0433

The CVE-2002-0433 entry concerns Pi3Web 2.0.0 where remote attackers can view restricted files by issuing an HTTP request containing a wildcard character ("*"). This is an unauthorized disclosure vulnerability via crafted requests, as described in NVD and CVE records. Connected documents confirm ...

CVE-2002-0572

CVE-2002-0572 affects BSD-based systems (notably FreeBSD 4.5 and earlier); the issue arises when a local user closes standard input/output/error (FDs 0–2) and a subsequent setuid-invoked I/O operation reuses those descriptors, allowing read/write access to restricted files. Connected records corr...