6857 matches found
CVE-2004-1834
moddiskcache in Apache 2.0 through 2.0.49 stores client headers, including authentication information, on the hard disk, which could allow local users to gain sensitive information...
CVE-2003-1034
The RPM installation of SAP DB 7.x creates the 1 dbmsrv or 2 lserver programs with world-writable permissions, which allows local users to gain privileges by modifying those programs...
PT-2004-1382 · Red Hat +1 · Red Hat +1
Name of the Vulnerable Software and Affected Versions: Symantec AntiVirus Scan Engine versions 4.0 through 4.3 Description: The issue allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log. This is related to the LiveUpdate capability liveupdate.sh i...
CVE-2003-0612
Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin...
CVE-2003-1018
CVE-2003-1018 is a format-string vulnerability in the enq command on AIX 4.3, 5.1, and 5.2 that allows local users with rintq group privileges to gain privileges via unspecified vectors. Connected Nessus entries indicate the issue is addressed by vendor patches: AIX 5.2 IY45329 and AIX 5.1 IY4625...
multiple wu-ftpd bugs
Local user can bypass root directory protection, buffer overflow on S/Key authentication...
CVE-2004-0088
The System Configuration subsystem in Mac OS 10.2.8 allows local users to modify network settings, a different vulnerability than CVE-2004-0087...
RhinoSoft Serv-U FTPd Server 345 - MDTM Command Time Argument Buffer Overflow (4)
RhinoSoft Serv-U FTPd Server 345 - MDTM Command Time Argument Buffer Overflow 4 // source: https://www.securityfocus.com/bid/9751/info Serv-U FTP Server has been reported prone to a remote stack based buffer overflow vulnerability when handling time zone arguments passed to the MDTM FTP command...
Mac OS X pppd format string vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Mac OS X pppd format string vulnerability Release Date: 02/23/2004 Application: pppd 2.4.0 Platform: Mac OS X 10.3.2 and below Severity: Local users are able to retrieve PAP/CHAP credential...
PT-2004-2988 · Ca · Etrust Inoculateit
Name of the Vulnerable Software and Affected Versions: eTrust InoculateIT for Linux version 6.0 Description: The issue concerns insecure permissions for multiple files and directories, including the application's registry and tmp directories. This allows local users to delete, modify, or examine...
CVE-2004-2087
Unknown vulnerability in SandSurfer before 1.7.0 allows remote attackers to gain access as a logged-in user...
Moderate: Red Hat Security Advisory: : Updated NetPBM packages fix multiple temporary file vulnerabilities
Updated NetPBM packages are available that fix a number of temporary file vulnerabilities in the netpbm libraries. The netpbm package contains a library of functions that support programs for handling various graphics file formats, including .pbm portable bitmaps, .pgm portable graymaps, .pnm...
Moderate: Red Hat Security Advisory: kernel security update
Updated kernel packages are now available that fix a few security issues, an NFS performance issue, and an e1000 driver loading issue introduced in Update 3. The Linux kernel handles the basic functions of the operating system. Alan Cox found issues in the R128 Direct Render Infrastructure that...
CVE-2004-2134
Oracle toplink mapping workBench uses a weak encryption algorithm for passwords, which allows local users to decrypt the passwords...
CVE-2003-0985
The mremap system call domremap in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds checks, which allows local users to cause a denial of service and possibly gain privileges by causing a remapping of a virtual memory area VMA to create...
SRT2004-01-9-1022 - Symantec LiveUpdate allows local users to become SYSTEM
Secure Network Operations, Inc. http://www.secnetops.com/research Strategic Reconnaissance Team researchatsecnetops.com Team Lead Contact kfatsecnetops.com Spam Contact rm -rf /@snosoft.com Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS,...
Surfnet 1.31 - CMD_CREDITCARD_CHARGE Denial of Service
Surfnet 1.31 - CMDCREDITCARDCHARGE Denial of Service source: https://www.securityfocus.com/bid/9348/info Surfnet is prone to a denial of service vulnerability via the CMDCREDITCARDCHARGE command. By issuing this command with malformed arguments, it is possible to crash the software. When the...
CVE-2003-1169
DATEV Nutzungskontrolle 2.1 and 2.2 has insecure write permissions for critical registry keys, which allows local users to bypass access restrictions by importing NukoInfo values in certain DATEV keys, which disables Nutzungskontrolle...