8966 matches found
CVE-2008-1710
CVE-2008-1710 describes an untrusted search path vulnerability in the IBM AIX 6.1 component chnfsmnt that lets local users escalate privileges by modifying the PATH environment variable. The NVD entry assigns a CVSS v2 base score of 7.2 (HIGH) with local access, low attack complexity, and complet...
CVE-2008-1319
Untrusted search path and argument injection vulnerability in the VersantD service in Versant Object Database 7.0.1.3 and earlier, as used in Borland CaliberRM and probably other products, allows remote attackers to execute arbitrary commands via a request to TCP port 5019 with a modified...
CVE-2008-1319
The CVE-2008-1319 issue affects Versant Object Database (VersantD service) up to version 7.0.1.3. The vulnerability arises from an untrusted search path and argument injection in the VersantD service that can be exploited by sending a crafted request to TCP port 5019 with a modified VERSANT_ROOT ...
CVE-2008-1274
Untrusted search path vulnerability in man in IBM AIX 6.1.0 allows local users to execute arbitrary code via a malicious program in the man directory...
CVE-2008-1274
CVE-2008-1274 describes an untrusted search path vulnerability in the IBM AIX 6.1.0 man utility. The issue allows local users to execute arbitrary code by placing a malicious program in the man directory . The root cause is the untrusted search path, but the provided documents do not include conc...
CVE-2008-1274
Untrusted search path vulnerability in man in IBM AIX 6.1.0 allows local users to execute arbitrary code via a malicious program in the man directory...
Design/Logic Flaw
Untrusted search path vulnerability in src/mainwindow.c in Net Activity Viewer 0.2.1 allows local users with Net Activity Viewer privileges to execute arbitrary code via a malicious gksu program, which is invoked during the Restart As Root action...
GLSA-200803-01 : Adobe Acrobat Reader: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200803-01 Adobe Acrobat Reader: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Adobe Acrobat Reader, including: A file disclosure when using file:// in PDF documents CVE-2007-1199 Multiple buffer overflo...
acroread JavaScript Insecure Libary Search Path
Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.1 and earlier allows local users to execute arbitrary code via a malicious Security Provider library in the reader's current working directory. NOTE: this issue might be subsumed by CVE-2008-0655...
CVE-2007-5757
Untrusted search path vulnerability in db2pd in IBM DB2 Universal Database UDB 8 before FixPak 16 and 9 before Fix Pack 4 allows local users to gain root privileges via a modified DB2INSTANCE environment variable that points to a malicious library. NOTE: this might be the same issue as...
Design/Logic Flaw
Untrusted search path vulnerability in db2pd in IBM DB2 Universal Database UDB 8 before FixPak 16 and 9 before Fix Pack 4 allows local users to gain root privileges via a modified DB2INSTANCE environment variable that points to a malicious library. NOTE: this might be the same issue as...
CVE-2007-5757
Untrusted search path vulnerability in db2pd in IBM DB2 Universal Database UDB 8 before FixPak 16 and 9 before Fix Pack 4 allows local users to gain root privileges via a modified DB2INSTANCE environment variable that points to a malicious library. NOTE: this might be the same issue as...
CVE-2007-5666
Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.1 and earlier allows local users to execute arbitrary code via a malicious Security Provider library in the reader's current working directory. NOTE: this issue might be subsumed by CVE-2008-0655...
CVE-2008-0302
Untrusted search path vulnerability in apt-listchanges.py in apt-listchanges before 2.82 allows local users to execute arbitrary code via a malicious apt-listchanges program in the current working directory...
DEBIAN-CVE-2008-0302
Untrusted search path vulnerability in apt-listchanges.py in apt-listchanges before 2.82 allows local users to execute arbitrary code via a malicious apt-listchanges program in the current working directory...
CVE-2008-0302
Untrusted search path vulnerability in apt-listchanges.py in apt-listchanges before 2.82 allows local users to execute arbitrary code via a malicious apt-listchanges program in the current working directory...
CVE-2008-0302
Untrusted search path vulnerability in apt-listchanges.py in apt-listchanges before 2.82 allows local users to execute arbitrary code via a malicious apt-listchanges program in the current working directory...
CVE-2008-0302
CVE-2008-0302 affects apt-listchanges and is due to unsafe/untrusted search paths when importing Python libraries. Local attackers could execute arbitrary code by placing a malicious apt-listchanges in the current working directory. Public advisories (Debian DSA-1465-1/2 and Ubuntu USN-572-1) ind...