CVE-1999-1104

Windows 95 uses weak encryption for the password list .pwl file used when password caching is enabled, which allows local users to gain privileges by decrypting the passwords...

CVE-2001-0371

Race condition in the UFS and EXT2FS file systems in FreeBSD 4.2 and earlier, and possibly other operating systems, makes deleted data available to user processes before it is zeroed out, which allows a local user to access otherwise restricted information...

CVE-2001-0765

CVE-2001-0765 affects BisonFTP V4R1. The vulnerability allows local users to access directories outside their home directory by uploading .bdl files, which can then be linked to other directories. The impact is partial confidentiality, integrity, and availability (per the NVD entry, CVSSv2 base s...

CVE-1999-1146

CVE-1999-1146 : Vulnerability in the Glance and gpm programs of GlancePlus on HP-UX 9.x and earlier allows local users to access arbitrary files and gain privileges. The description does not specify affected versions beyond the HP-UX 9.x and earlier, nor provide explicit remediation steps. No exp...

CVE-2000-0615

LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages to files...

CVE-2001-0416

CVE-2001-0416 affects sgml-tools (sgmltools) prior to version 1.0.9-15. The root cause is insecure handling of temporary files: sgml-tools creates temporary files directly (or in insecure permissions) which can allow other local users to read files being processed. Impact is partial confidentiali...

CVE-1999-1138

The CVE affects SCO UNIX System V/386 Release 3.2 and other SCO products. Its description states that home directories are created under /tmp (dos user) and /usr/tmp (asg user), which are world-writable, enabling other users to access those accounts. The underlying issue is the use of world-writa...

CVE-2001-0366

The CVE-2001-0366 issue affects saposcol in SAP R/3 Web Application Server Demo prior to 1.5, where the process trusts the PATH environment variable to locate and execute the expand program. This design allows local users to escalate to root by altering PATH to point to a Trojan horse expand prog...

CVE-2001-0371

CVE-2001-0371 describes a race condition in the UFS and EXT2FS file systems affecting FreeBSD 4.2 and earlier (and possibly other operating systems). The vulnerability allows a local user to access data that has already been deleted but not yet zeroed out, leading to exposure of otherwise restric...

CVE-2001-0641

Buffer overflow in man program in various distributions of Linux allows local user to execute arbitrary code as group man via a long -S option...

CVE-2001-0506

Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes SSI directive for a long filename, which triggers the overflow when the directory name is added, aka the "SSI privilege elevation" vulnerability...

CVE-1999-0380

CVE-1999-0380 affects SLMail 3.1 and 3.2. When Remote Administration Service (RAS) is enabled, an attacker can point a user’s Finger File to a target file and, after running finger, access NTFS files locally. The underlying cause is the Finger service handling a user file reference insecurely, en...

CVE-2001-0549

Symantec LiveUpdate 1.5 stores proxy passwords in cleartext in a registry key, which could allow local users to obtain the passwords...

CVE-2000-0795

Buffer overflow in lpstat in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long -n option...

CVE-2001-0373

Technical details about CVE-2001-0373 are not publicly provided in the supplied documents; only the general description is present. Monitor for updates.

pforum: mysql-injection-bug

ppp-design has found a mysql-injection-bug in pforum: Details ------- Product: pforum Version: 1.14 and maybe all versions before OS affected: all OS with php and mysql Vendor-URL: www.powie.de Vendor-Status: informed, workaround available Security-Risk: Medium-High Remote-Exploit: Yes Introducti...

[SECURITY] [DSA 112-1] New hanterm packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 112-1 [email protected] http://www.debian.org/security/ Martin Schulze February 16th, 2002 - -------------------------------------------------------------------------- Package : hanterm...

[SECURITY] [DSA 079-2] New UUCP packages finally fix uucp uid/gid access

-------------------------------------------------------------------------- Debian Security Advisory DSA 079-2 [email protected] http://www.debian.org/security/ Martin Schulze February 8th, 2002 - -------------------------------------------------------------------------- Package : uucp...

OS/400 - User Account Name Disclosure

source: https://www.securityfocus.com/bid/4059/info AS/400 is a midrange computer platform developed by IBM. It is designed to be highly reliable and efficient, and uses the OS/400 operating system. An information disclosure vulnerability has been reported to exist in OS/400 systems. An...

CVE-2001-0990

Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into the libvpopmail.a library, which allows local users to obtain the MySQL username and password by inspecting the vpopmail programs that use the library...