Samba 2.0.7 - SWAT Symlink (2)

Samba 2.0.7 - SWAT Symlink 2 source: https://www.securityfocus.com/bid/1872/info The Samba software suite is a collection of programs that implements the SMB protocol for unix systems, allowing you to serve files and printers to Windows, NT, OS/2 and DOS clients. This protocol is sometimes also...

CVE-2000-0691

The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.lastrun to the target file...

CVE-2000-0728

xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack...

Oracle Internet Directory 2.0.6 - oidldap

Oracle Internet Directory 2.0.6 - oidldap // source: https://www.securityfocus.com/bid/1828/info Oracle Internet Directory 2.0.6 is a pre-alpha development release, available as both an addon package and in the Oracle Database Software release 8.1.6. A vulnerability has been found in the oidldap...

Oracle Internet Directory 2.0.6 - oidldap

// source: https://www.securityfocus.com/bid/1828/info Oracle Internet Directory 2.0.6 is a pre-alpha development release, available as both an addon package and in the Oracle Database Software release 8.1.6. A vulnerability has been found in the oidldap binary within the package. A buffer overfl...

CVE-2000-0466

AIX cdmount allows local users to gain root privileges via shell metacharacters...

CVE-2000-0537

BRU backup software is affected. Local users can cause arbitrary data to be appended to files by supplying an alternate configuration file via the BRUEXECLOG environment variable. The description does not specify affected versions, root cause beyond environmental variable handling, or remediation...

CVE-2000-0009

The bnapass program in Optivity NETarchitect uses the PATH environmental variable for finding the "rm" program, which allows local users to execute arbitrary commands...

CVE-2000-0816

Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters...

CVE-2000-0724

The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various files in /tmp, including uudecode, snarf, and some installer files...

CVE-2000-0721

The CVE-2000-0721 entry concerns the FlagShip package, specifically the FSserial, FlagShip_c, and FlagShip_p programs, which are installed world-writeable. Root cause: local write access allows replacement of these components with Trojan horses. Impact: local users can modify these binaries, pote...

CVE-2000-0691

The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.lastrun to the target file...

nathan purciful phpphotoalbum 0.9.9 - Directory Traversal

source: https://www.securityfocus.com/bid/1650/info The explorer.php script within phpPhotoAlbum 0.9.9 and possibly previous versions are vulnerable to directory traversal. By requesting a URL composed of explorer.php and the ../ string in the value of the "folder" variable it is possible for a...

GWScripts News Publisher 1.0 - author.file Write

GWScripts News Publisher 1.0 - author.file Write source: https://www.securityfocus.com/bid/1621/info It is possible for a remote user to add an author to the author index author.file in GWScripts News Publisher, a web news publisher. This can be done by requesting the following raw HTTP request...

Security Advisory: FreeBSD-SA-00:41.elf

Topic: Malformed ELF images can cause a system hang Category: core Module: kernel Announced: 2000-08-28 Credits: Adam McDougall [email protected] Affects: FreeBSD 3.x, 4.x and 5.x prior to the correction date Corrected: 2000-07-25 FreeBSD 5.0-CURRENT 2000-07-23 FreeBSD 4.0-STABLE FreeBSD only: Y...

FreeBSD-SA-00:43.brouted

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:43 Security Advisory FreeBSD, Inc. Topic: brouted port allows gid kmem compromise Category: ports Module: brouted Announced: 2000-08-28 Credits: Discovered during interna...

FreeBSD-SA-00:41.elf

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:41 Security Advisory FreeBSD, Inc. Topic: Malformed ELF images can cause a system hang Category: core Module: kernel Announced: 2000-08-28 Credits: Adam McDougall Affects...

CGI Script Center Account Manager 1.0 LITE / PRO - Administrative Password Alteration (2)

source: https://www.securityfocus.com/bid/1604/info Regardless of privilege level, any remote user can modify the administrative password for CGI Script Centers' Account Manager. In order to accomplish this, a user would access the following URL with a POST command:...

SUIDPerl 5.00503 - Mail Shell Escape (2)

source: https://www.securityfocus.com/bid/1547/info The interaction between some security checks performed by suidperl, the setuid version of perl, and the /bin/mail program creates a scenario that allows local malicious users to execute commands with root privileges. The suidperl program perform...

Microsoft Windows Server 2000 - Named Pipes Predictability

source: https://www.securityfocus.com/bid/1535/info The Service Control Manager SCM is an administrative tool in Windows 2000 which handles the creation and modification of system services such as Server, Workstation, Alerter, and ClipBook. A server-side named pipe is created before each service ...