CVE-2002-0671

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web site but can not verify the integrity of the applications, which could allow remote attackers to install Trojan horse applications via DNS spoofing...

PT-2002-1697 · Pingtel · Pingtel Xpressa

Name of the Vulnerable Software and Affected Versions: Pingtel xpressa SIP-based voice-over-IP phone versions 1.2.5 through 1.2.7.4 Description: The issue allows remote attackers to install Trojan horse applications via DNS spoofing because the phone downloads applications from a web site but...

CVE-2002-0676

SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remote attackers to execute arbitrary code by posing as the Apple update server via techniques such as DNS spoofing or cache poisoning, and supplying Trojan Horse updates...

CVE-2001-1345

The CVE concerns bctool in Jetico BestCrypt 0.7 and earlier, which trusts a user-supplied PATH to locate and execute an fsck utility. This PATH manipulation allows local users to gain privileges by renaming or placing a Trojan horse program earlier in PATH. Affected component: bctool within Jetic...

CVE-2002-0317

Gator ActiveX component IEGator.dll 3.0.6.1 allows remote web sites to install arbitrary software by specifying a Trojan Gator installation file setup.ex in the src parameter...

CVE-2002-0340

Windows Media Player WMP 8.00.00.4477, and possibly other versions, automatically detects and executes .wmf and other content, even when the file's extension or content type does not specify .wmf, which could make it easier for attackers to conduct unauthorized activities via Trojan horse files...

CVE-2002-0529

HP Photosmart printer driver for Mac OS X installs the hpimagingconnectivity program and the hpimagingconnectivity.app directory with world-writable permissions, which allows local users to gain privileges of other Photosmart users by replacing hpimagingconnectivity with a Trojan horse...

CVE-2002-0529

The CVE-2002-0529 entry concerns HP Photosmart printer driver for Mac OS X. The vulnerability arises because the hp_imaging_connectivity program and the hp_imaging_connectivity.app directory are installed with world-writable permissions, enabling a local user to replace the executable with a Troj...

CVE-2002-0470

PHPNetToolpack 0.1 relies on its environment's PATH to find and execute the traceroute program, which could allow local users to gain privileges by inserting a Trojan horse program into the search path...

Unauthorized access to PowerChute shared folder

During programm installation Program FilesPwrchute shared with full access allowing to trojan program executables...

CVE-2002-0317

Gator ActiveX component IEGator.dll 3.0.6.1 allows remote web sites to install arbitrary software by specifying a Trojan Gator installation file setup.ex in the src parameter...

CVE-2001-1238

Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named 1 winlogon.exe, 2 csrss.exe, 3 smss.exe and 4 services.exe via the Process tab which could allow local users to install Trojan horses that cannot be stopped with the Task Manager...

CVE-2001-1238

Task Manager in Windows 2000 cannot end certain processes with uppercase names (e.g., winlogon.exe, csrss.exe, smss.exe, services.exe) via the Process tab. This could allow local users to install Trojan horses that cannot be stopped with Task Manager. Documents do not provide a fix or patch; PT-S...

CVE-2002-0317

CVE-2002-0317 involves the Gator ActiveX component (IEGator.dll) 3.0.6.1. The vulnerability allows remote websites to install arbitrary software by specifying a Trojan Gator installation file (setup.ex_) in the src parameter, enabling a remote-initiated installation via the ActiveX control. This ...

CVE-2002-0340

CVE-2002-0340 concerns Windows Media Player (WMP) 8.00.00.4477 and potentially other versions, where the player can automatically detect and execute .wmf and similar content even if the file extension or content type does not indicate .wmf. This behavior could enable attackers to trigger unauthor...

CVE-2002-0340

Windows Media Player WMP 8.00.00.4477, and possibly other versions, automatically detects and executes .wmf and other content, even when the file's extension or content type does not specify .wmf, which could make it easier for attackers to conduct unauthorized activities via Trojan horse files...

More SWF vulnerabilities?

Vulnerable systems: unpatched "standalone Flash players" Macromedia Shockwave Flash player versions before January 2002? Fix: "In response to the discovery of the virus, in January Macromedia released an update to its standalone Flash player that causes the player to ignore the "exec" action."...

CVE-2001-0573

The CVE-2001-0573 issue affects IBM AIX lsfs (4.x) where a local user can gain root by placing Trojan horse programs named grep or lslv in a directory under their control. lsfs uses relative pathnames and invokes grep/lslv; if lsfs is setuid root, the attacker’s local binaries will run with root ...

CVE-1999-1019

SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, enabling local users to replace a privileged executable (processd) with a Trojan horse and potentially achieve a root/Administrator compromise. The affected component is the SpectroSERV...

CVE-2001-0801

IRIX 6.5.13f and earlier is affected via lpstat, where a local user can gain root privileges by specifying a Trojan Horse nettype shared library. Root/privilege escalation is the stated impact; the root cause is a manipulated nettype shared library in lpstat. The provided documents do not specify...