6865 matches found
CVE-1999-1561
Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file scserv.conf, which could allow a local user to gain administrative privileges on the server...
CVE-1999-1268
Vulnerability in KDE konsole allows local users to hijack or observe sessions of other users by accessing certain devices...
CVE-1999-1366
Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily decrypt the passwords and read e-mail...
CVE-1999-1345
CVE-1999-1345 affects the Auto_FTP 0.2 setup where the Auto_FTP.pl script uses the /tmp/ftp_tmp directory as a shared area with insecure permissions. This misconfiguration allows local users to: (1) place arbitrary files into the shared directory to be sent to the remote server, and (2) view file...
CVE-1999-1239
HP-UX 9.x does not properly enable the Xauthority mechanism in certain conditions, which could allow local users to access the X display even when they have not explicitly been authorized to do so...
CVE-1999-1277
The CVE-1999-1277 issue affects the BackWeb client, where the proxy authentication username and password are stored in cleartext in the Communication registry key. This exposes credentials to other local users, enabling potential privilege escalation through password reading. Root cause: credenti...
CVE-1999-1282
The CVE-1999-1282 entry concerns RealSystem G2 server where the administrator password is stored in cleartext in a world-readable configuration file. The underlying impact is that local users can gain privileges on the affected system due to this configuration weakness. The provided documents do ...
CVE-1999-1071
Excite for Web Servers EWS 1.1 installs the Architext.conf authentication file with world-writeable permissions, which allows local users to gain access to Excite accounts by modifying the file...
CVE-1999-1534
Buffer overflow in 1 nlservd and 2 rnavc in Knox Software Arkeia backup product allows local users to obtain root access via a long HOME environmental variable...
CVE-1999-1554
/usr/sbin/Mail on SGI IRIX 3.3 and 3.3.1 does not properly set the group ID to the group ID of the user who started Mail, which allows local users to read the mail of other users...
security alert: speechd from speechio.org
this is my first post in this kin of thing so bare with me. there is a vulnerability in speechd that alllows you to run arbetrary code as the root user or whoever is running speechd hopefully not root!. it will only work if you are using rsynth, that is all i have tested, it may work on festival...
CVE-2001-1012
Vulnerability in screen before 3.9.10, related to a multi-attach error, allows local users to gain root privileges when there is a subdirectory under /tmp/screens/...
RE: Possible Issue with Netinfo and Mac OS X
I have kept quiet about this to this point because I have not contacted Apple, or given the vendor any opportunity to respond, but if this discussion is going to be held in public, I think the following points are worthy of discussion: /usr/bin/nireport can be run by any user and can pull...
CVE-2001-0983
UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read the file to decrypt the passwords and gain privileges...
Security Advisory 2001-014: dump(8) exposes 'tty' group
-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2001-014 ================================= Topic: dump8 exposes 'tty' group Version: NetBSD-current: source prior to August 8, 2001 NetBSD 1.5.1: affected NetBSD 1.5: affected NetBSD 1.4.x: all affected Severity: local users can gain tty...
CVE-2001-1113
Buffer overflow in TrollFTPD 1.26 and earlier allows local users to execute arbitrary code by creating a series of deeply nested directories with long names, then running the ls -R recursive command...
vulnerability in oracle binary in Oracle 8.0.5 - 8.1.6
WWW.PLAZASITE.COM System & Security Division Title: Vulnerability in oracle binary in Oracle 8.0.5 Date: 11-12-2000 Platform: Only tested in Linux, but can be "exported" to others. Impact: Any user compromise any file owned by oracle DDBB owner. Author: Juan Manuel Pascual [email protected]...
CVE-2001-0624
QNX 2.4 allows a local user to read arbitrary files by directly accessing the mount point for the FAT disk partition, e.g. /fs-dos...