CVE-2003-0644

Kdbg 1.1.0 through 1.2.8 does not check permissions of the .kdbgrc file, which allows local users to execute arbitrary commands...

CVE-2003-0699

The C-Media PCI sound driver in Linux before 2.4.21 does not use the getuser function to access userspace, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0700...

DEBIAN-CVE-2003-0606

sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files...

CVE-2003-0547

GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the /.xsession-errors file...

[RHSA-2003:258-01] GDM allows local user to read any file.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: GDM allows local user to read any file. Advisory ID: RHSA-2003:258-01 Issue date: 2003-08-21 Updated on: 2003-08-21 Product: Red Hat Linux...

Low: Red Hat Security Advisory: : GDM allows local user to read any file.

Updated GDM packages are available which correct a bug allowing local users to read any text files on the system, and a denial of service issue if XDMCP is enabled. GDM is the GNOME Display Manager for X. Versions of GDM prior to 2.4.1.6 contain a bug where GDM will run as root when examining the...

CVE-2003-0517

faxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink attack on JOB files...

DEBIAN-CVE-2003-0440

The 1 semi MIME library 1.14.5 and earlier, and 2 wemi 1.14.0 and possibly other versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files...

MDaemon 5.0.5 authentication vulnerability

Hello, There is a security problem on MDaemon 5.0.5 maybe other versions affected as well regarding smtp authentication. Blank password authenticates any valid user: For primary domain: User: VALIDUSER or [email protected] Password: blank password For secondary domains: User:...

wam1040.txt

Directory Traversal Vulnerability in 121 WAM! Server 1.0.4.0 Url: http://www.121software.com/121wam/server.asp "Imagine if you could centralise the management of your FTP server farm and give customers additional database management capability." "121 WAM! Server is a standard FTP server for...

Sun One 5.1 / IPlanet 5.0/5.1 - Administration Server Directory Traversal

source: https://www.securityfocus.com/bid/8367/info A problem in the checking of input by the Sun ONE Administration Server may lead to remote users escaping into restricted directories. This may allow an attacker to gain access to information that is sensitive in nature...

DEBIAN-CVE-2003-0489

tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor for capturing packets, which may allow local users to gain access to the descriptor via a separate vulnerability in tcptraceroute...

SRT2003-08-01-0126 - cdrtools local root exploit

Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...

CVE-2003-0597

Unknown vulnerability in display of Merge before 5.3.23a in UnixWare 7.1.x allows local users to gain root privileges...

CVE-2003-0596

FDclone 2.00a, and other versions before 2.02a, creates temporary directories with predictable names and uses them if they already exist, which allows local users to read or modify files of other fdclone users by creating the directory ahead of time...

CVE-2003-0596

FDclone 2.00a, and other versions before 2.02a, creates temporary directories with predictable names and uses them if they already exist, which allows local users to read or modify files of other fdclone users by creating the directory ahead of time...

CVE-2003-0448

Portmon 1.7 and possibly earlier versions allows local users to read and write arbitrary files via the 1 -c host file or 2 -l log file command line options...

CVE-2001-1409

dexconf in XFree86 Xserver 4.1.0-2 creates the /dev/dri directory with insecure permissions 666, which allows local users to replace or create files in the root file system...

CVE-2003-0539

skk Simple Kana to Kanji conversion program 12.1 and earlier, and the ddskk package which is based on skk, creates temporary files insecurely, which allows local users to overwrite arbitrary files...

Important: Red Hat Security Advisory: : : : Updated Xpdf packages fix security vulnerability

Updated Xpdf packages are available that fix a vulnerability where a malicious PDF document could run arbitrary code. Xpdf is an X Window System based viewer for Portable Document Format PDF files. During an audit of CUPS, a printing system, Zen Parsec found an integer overflow vulnerability in t...