4810 matches found
jailed processes can manipulate host routing tables
A programming error resulting in a failure to verify that an attempt to manipulate routing tables originated from a non-jailed process. Jailed processes running with superuser privileges could modify host routing tables. This could result in a variety of consequences including packets being sent...
phpGroupWare 0.9.14 - 'Tables_Update.Inc.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/12074/info phpGroupWare is prone to a remote file include vulnerability, potentially allowing the execution of malicious PHP code. This would occur in the context of the affected web server. The tablesupdate.inc.php script contains the following include...
phpGroupWare 0.9.14 - Tables_Update.Inc.php Remote File Inclusion
phpGroupWare 0.9.14 - TablesUpdate.Inc.php Remote File Inclusion source: https://www.securityfocus.com/bid/12074/info phpGroupWare is prone to a remote file include vulnerability, potentially allowing the execution of malicious PHP code. This would occur in the context of the affected web server...
mysql -- ALTER MERGE denial of service vulnerability
Dean Ellis reported a denial of service vulnerability in the MySQL server: Multiple threads ALTERing the same or different MERGE tables to change the UNION eventually crash the server or hang the individual threads. Note that a script demonstrating the problem is included in the MySQL bug report...
CVE-2002-1124
Purity (1-16), a game for nerds, is affected by multiple buffer overflows that can let local users gain privileges and modify high scores tables. Root cause: overflow conditions in purity 1-16. Impact: local privilege escalation and integrity/availability of high score data. Remediation: apply th...
CVE-2002-1124: Undefined Security Weakness
Multiple buffer overflows in purity 1-16 allow local users to gain privileges and modify high scores tables...
CVE-1999-1254
Technical details (affected software, vulnerability specifics, and remediation) are not publicly provided in the connected documents. Monitor for updates.
CVE-1999-1254: Undefined Security Weakness
Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which causes Windows to change its routing tables...
PT-2001-1575 · 3Com +1 · 3Com Airconnect Ap-4111 +1
Name of the Vulnerable Software and Affected Versions: 3Com AirConnect AP-4111 Symbol 41X1 Access Point Description: The issue allows remote attackers to obtain the WEP encryption key by reading it from a MIB when the value should be write-only. This can be done via the dot11WEPDefaultKeyValue in...
CVE-2000-0379
The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do so...
CVE-2000-0379
The CVE-2000-0379 entry concerns the Netopia R9100 router, where authenticated users can modify SNMP tables even when the administrator has disabled this capability. According to the NVD entry, the vulnerability has a CVSS base score of 3.6 (LOW) with LOCAL attack vector, low complexity, and no a...
CVE-2000-0379: Undefined Security Weakness
The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do so...
CVE-2000-0379
The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do so...
CVE-1999-0550
Technical details (affected product/version/patch/fix) are not publicly available in the provided connected documents. Monitor for updates.
CVE-1999-0550
A router's routing tables can be obtained from arbitrary hosts...
CVE-1999-0254: Undefined Security Weakness
A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive information...
CVE-1999-0902
CVE-1999-0902 affects ypserv (noted in multiple feeds, including CBLMARINER and PT-1999-1448) with the vulnerability enabling local administrators to modify password tables. Affected package/version cited: ypserv 4.1-4. The core issue is an improper handling that allows a local privileged user to...
CVE-1999-0902
ypserv allows local administrators to modify password tables...