895 matches found
CVE-2001-0774
Tripwire 1.3.1, 2.2.1 and 2.3.0 allows local users to overwrite arbitrary files and possible gain privileges via a symbolic link attack on temporary files...
CVE-1999-1565
Man2html 2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file...
CVE-1999-1358
When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the local ntconfig.pol is not writable by the user, which could allow local users to bypass restrictions that would otherwise be enforced by the policy, possibly by changing the policy...
[SECURITY] [DSA 079-2] New UUCP packages finally fix uucp uid/gid access
-------------------------------------------------------------------------- Debian Security Advisory DSA 079-2 [email protected] http://www.debian.org/security/ Martin Schulze February 8th, 2002 - -------------------------------------------------------------------------- Package : uucp...
CVE-2001-1548
ZoneAlarm 2.1 through 2.6 and ZoneAlarm Pro 2.4 and 2.6 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters...
CVE-2001-1497
Microsoft Internet Explorer 4.0 through 6.0 could allow local users to differentiate between alphanumeric and non-alphanumeric characters used in a password by pressing certain control keys that jump between non-alphanumeric characters, which makes it easier to conduct a brute-force password...
CVE-2001-0912
Packaging error for expect 8.3.3 in Mandrake Linux 8.1 causes expect to search for its libraries in the /home/snailtalk directory before other directories, which could allow a local user to gain root privileges...
CVE-2001-0848
join.cfm in e-Zone Media Fuse Talk allows a local user to execute arbitrary SQL code via a semi-colon ; in a form variable...
CVE-2001-0845
Vulnerability in DECwindows Motif Server on OpenVMS VAX or Alpha 6.2 through 7.3, and SEVMS VAX or Alpha 6.2, allows local users to gain access to unauthorized resources...
CVE-2001-0914
Linux kernel before 2.4.11pre3 in multiple Linux distributions allows local users to cause a denial of service crash by starting the core vmlinux kernel, possibly related to poor error checking during ELF loading...
CVE-1999-1168
CVE-1999-1168 affects the install.iss script of Internet Security Scanner (ISS) for Linux v5.3, via a symlink race in a temporary file that lets a local user change arbitrary file permissions. Root cause: a symlink attack on a temporary file used during installation. Impact: local privilege/permi...
CVE-1999-1426
Solaris Solstice AdminSuite AdminSuite 2.1 follows symbolic links when updating an NIS database, which allows local users to overwrite arbitrary files...
CVE-2000-1202
ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's directories, which allows a malicious local user to execute arbitrary code as root via a Trojan horse Ikeyman class...
CVE-1999-1312
Vulnerability in DEC OpenVMS VAX 5.5-2 through 5.0, and OpenVMS AXP 1.0, allows local users to gain system privileges...
CVE-1999-1371
Buffer overflow in /usr/bin/write on Solaris 2.6 and 7 allows local privilege escalation via a long string in the terminal name argument. Exploitation details are not provided in the connected documents; remediation/fixes are not specified here.
CVE-2001-1092
msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink attack on the .mhprofile file...
CVE-2001-0349
Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious program with it, the first of two variants of...
Linux Man Page 6.1/6.2/7.0/7.1- Source Buffer Overflow
source: https://www.securityfocus.com/bid/2872/info A buffer overflow vulnerability exists in the implementation of the 'man' system manual pager program commonly included with Linux distributions. The vulnerability exists due to the way the program handles manual page files beginning with a '.so...
KDE KFM creates temporary files insecurely
Overview KDE's kfm creates and uses temporary cache directories insecurely. Description kfm, the KDE File Manager, creates a cache directory for each user. This directory is placed in /tmp and predictably named, based on the UID. These directories are created without checking for correct ownershi...