EUVD-2006-2200

Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x aka StarOffice up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox and conduct unauthorized activities via certain applets in OpenOffice documents...

CVE-2006-2199

OpenOffice.org Java sandbox escape (CVE-2006-2199) affects OpenOffice/StarOffice releases up to 2.0.x before 2.0.3 and 1.1.x up to 1.1.5. A user-invoked Java applet in a document could break sandbox restrictions and run arbitrary code with the caller’s privileges. Connected advisories show distri...

CVE-2006-2198

CVE-2006-2198 affects OpenOffice.org/StarOffice from 1.1.x (up to 1.1.5) and 2.0.x before 2.0.3. A user‑supplied OpenOffice document containing a malicious BASIC macro can execute without prompting, enabling the macro to run with the current user’s privileges. This can lead to unauthorized activi...

CVE-2006-2199

Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x aka StarOffice up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox and conduct unauthorized activities via certain applets in OpenOffice documents...

CVE-2005-4418

Removed by vendor...

CVE-2005-4418

util-vserver before 0.30.208-1 with kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux sets a default policy that trusts unknown capabilities, which could allow local users to conduct unauthorized activities...

CVE-2005-4418

CVE-2005-4418 affects Debian vserver: util-vserver with kernel-patch-vserver, where the default policy trusts unknown capabilities, potentially allowing local privilege escalation. Root cause: insecure default policy in util-vserver components. Affected versions include kernel-patch-vserver 1.9.5...

CVE-2005-4418

util-vserver before 0.30.208-1 with kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux sets a default policy that trusts unknown capabilities, which could allow local users to conduct unauthorized activities...

CVE-2005-4418

util-vserver before 0.30.208-1 with kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux sets a default policy that trusts unknown capabilities, which could allow local users to conduct unauthorized activities...

CVE-2004-2611

The Change Permissions function in the Sophster suite before 0.9.6 28 May 2004 aka 0.9.6-r5, possibly including Sophster, FreeSophster, and FreeSophsterPAM, removes the 1 setuid, 2 setgid, and 3 sticky bits when changing a file, which might allow attackers to gain privileges or conduct other...

CVE-2002-2169

Cross-site scripting vulnerability AOL Instant Messenger AIM 4.5 and 4.7 for MacOS and Windows allows remote attackers to conduct unauthorized activities, such as adding buddies and groups to a user's buddy list, via a URL with a META HTTP-EQUIV="refresh" tag to an aim: URL...

CVE-2002-2169

CVE-2002-2169 affects AOL Instant Messenger (AIM) 4.5 and 4.7 on MacOS and Windows. A crafted URL containing a META HTTP-EQUIV="refresh" tag to an aim: URL triggers cross-site scripting, enabling remote attackers to perform unauthorized actions such as adding buddies and groups to a user’s buddy ...

CVE-2005-3169

Microsoft Windows 2000 before Update Rollup 1 for SP4, when the "audit directory service access" policy is enabled, does not record a 565 event message for File Delete Child operations on an Active Directory object in the security event log, which could allow attackers to conduct unauthorized...

CVE-2005-3169

Microsoft Windows 2000 before Update Rollup 1 for SP4, when the "audit directory service access" policy is enabled, does not record a 565 event message for File Delete Child operations on an Active Directory object in the security event log, which could allow attackers to conduct unauthorized...

CVE-2005-3169

CVE-2005-3169 affects Microsoft Windows 2000 prior to Update Rollup 1 for SP4 when the audit directory service access policy is enabled. The vulnerability is that a 565 event message for File Delete Child operations on Active Directory objects is not recorded in the security event log, potentiall...

CVE-2005-2656

Polygen before 1.0.6 generates precompiled grammar objects with world-writable permissions, which allows local users to cause a denial of service disk consumption and possibly perform other unauthorized activities...

CVE-2005-2656

Polygen before 1.0.6 generates precompiled grammar objects with world-writable permissions, which allows local users to cause a denial of service disk consumption and possibly perform other unauthorized activities...

CVE-2005-2656

Polygen before 1.0.6 generates precompiled grammar objects with world-writable permissions, which allows local users to cause a denial of service disk consumption and possibly perform other unauthorized activities...

CVE-2005-2656

CVE-2005-2656 affects Polygen prior to 1.0.6. It generates precompiled grammar objects with world-writable permissions, allowing a local attacker to cause a denial of service (disk consumption) and potentially perform other unauthorized activities. Debian/Red Hat/OpenVAS records link to a fix in ...

CVE-2005-2656

Polygen before 1.0.6 generates precompiled grammar objects with world-writable permissions, which allows local users to cause a denial of service disk consumption and possibly perform other unauthorized activities...