895 matches found
CVE-2004-2634
The 1 bos.rte.servaid or 2 bos.rte.console filesets in IBM AIX 5.1 and 5.2 allow local users to overwrite arbitrary files via a symlink attack on temporary files via unknown attack vectors...
CVE-2004-2462
cplay 1.49 on Linux allows local users to overwrite arbitrary files via a symlink attack on the cplaycontrol temporary file...
CVE-2004-1894
TEXutil in ConTEXt, when executed with the --silent option, allows local users to overwrite arbitrary files via a symlink attack on texutil.log...
CVE-2004-2418
Buffer overflow in SlimFTPd 3.15 and earlier allows local users to execute arbitrary code via a long command, such as 1 CWD, 2 STOR, 3 MKD, and 4 STAT...
CVE-2004-1330
Buffer overflow in paginit in AIX 5.1 through 5.3 allows local users to execute arbitrary code via a long username...
CVE-2004-2302
Race condition in the sysfsreadfile and sysfswritefile functions in Linux kernel before 2.6.10 allows local users to read kernel memory and cause a denial of service crash via large offsets in sysfs files...
CVE-2004-2658
resmgr in SUSE CORE 9 does not properly identify terminal names, which allows local users to spoof terminals and login types...
CVE-2004-1276
IglooFTP 0.6.1, when recursively uploading a directory, allows local users to overwrite the files that are being uploaded by creating temporary files with names generated by the tmpnam function, before the files are opened by IglooFTP...
CVE-2004-1076
Multiple buffer overflows in the RtConfigLoad function in rt-config.c for Atari800 before 1.3.4 allow local users to execute arbitrary code via large values in the configuration file...
CVE-2004-1085
Human Interface Toolbox HIToolBox for Apple Mac 0S X 10.3.6 allows local users to exit applications via the force-quit key combination, even when the system is running in kiosk mode...
CVE-2004-1108
qpkg in Gentoolkit 0.2.0pre10 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary directory...
DSA-575-1 catdoc - insecure temporary file
Bulletin has no description...
CVE-2004-0966
The 1 autopoint and 2 gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secure Linux 1.5 through 2.1 and other operating systems, allows local users to overwrite files via a symlink attack on temporary files...
Yahoo! Store Security Advisory
Yahoo! Store Security Advisory Advisory: http://securitytracker.com/id?1011403 Date: September 23, 2004 Vendor: Yahoo! Product: Yahoo! Store Status: Fixed by the vendor; Coordinated release Credit: Ben Efros [email protected] http://www.citiprice.com/ Description: Ben Efros reported the followin...
aspWebCalendar.txt
1Introduction "aspWebCalendar is an .asp Active Server Pages script that allows you to easily create an online events calendar that supports multiple users. Easy installation and usage are the key features of aspWebCalendar. The script contains a text file with a few configuration variables that...
Debian DSA-492-1 : iproute - denial of service
Herbert Xu reported that local users could cause a denial of service against iproute, a set of tools for controlling networking in Linux kernels. iproute uses the netlink interface to communicate with the kernel, but failed to verify that the messages it received came from the kernel rather than...
CVE-2004-0457
The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2004-0831
McAfee VirusScan 4.5.1 does not drop SYSTEM privileges before allowing users to browse for files via the "System Scan" properties of the System Tray applet, which could allow local users to gain privileges...
IlohaMail Forged GET/POST Arbitrary Contacts Deletion
The target is running at least one instance of IlohaMail version 0.7.9-RC2 or earlier. Such versions contain a flaw that enables an authenticated user to delete contacts belonging to any user provided the DB-based backend is used to store contacts. The flaw arises because ownership of 'deleteitem...