Lucene search
K

11 matches found

CVE
CVE
added 2007/07/15 10:0 p.m.94 views

CVE-2007-3103

The CVE-2007-3103 issue affects the X.Org X11 xfs font server on Linux, caused by a race in the startup script that handles a temporary file in /tmp/.font-unix. A local user could abuse a symlink to modify file permissions, potentially elevating privileges. Exploitation details are not provided b...

6.2CVSS5.9AI score0.00902EPSS
CVE
CVE
added 2000/01/04 5:0 a.m.68 views

CVE-1999-0297

The CVE-1999-0297 issue is a buffer overflow in the Vixie Cron library up to version 3.0, enabling local users to obtain root access via a long environmental variable. The vulnerability is caused by a buffer overflow in the library's handling of environment data. Impact is local privilege escalat...

7.2CVSS7.2AI score0.004EPSS
CVE
CVE
added 2002/03/09 5:0 a.m.67 views

CVE-2001-0690

CVE-2001-0690 describes a format-string vulnerability in Exim in batched SMTP mode that can let an unauthenticated remote attacker execute arbitrary code via format strings in SMTP headers. The entry specifies affected Exim versions: 3.22-10 (Red Hat), 3.12 (Debian), and 3.16 (Conectiva). Attack ...

7.5CVSS7.5AI score0.11891EPSS
CVE
CVE
added 2000/02/04 5:0 a.m.65 views

CVE-2000-0017

The CVE-2000-0017 entry describes a buffer overflow in the Linux linuxconf package that allows remote attackers to gain root privileges via a long parameter. This is supported by the NVD entry and corroborated by OpenVAS/PT-Security records referencing linuxconf and the same issue. The available ...

10CVSS7.2AI score0.08938EPSS
CVE
CVE
added 1999/09/29 4:0 a.m.62 views

CVE-1999-0037

CVE-1999-0037 describes an arbitrary command execution in the metamail package when a user processes an attacker’s message with malicious content in its headers. The vulnerability stems from how metamail handles message headers during processing, enabling an attacker to execute commands on the af...

7.5CVSS7.5AI score0.03508EPSS
CVE
CVE
added 2000/01/04 5:0 a.m.62 views

CVE-1999-0894

The CVE-1999-0894 issue concerns the Red Hat Linux screen program that does not use Unix98 ptys, enabling local users to write to other terminals. The connected PT-2000-1029 entry reiterates the Red Hat Linux screen issue and notes that no information about a newer version containing a fix is ava...

10CVSS6.8AI score0.01871EPSS
CVE
CVE
added 2000/09/21 4:0 a.m.62 views

CVE-2000-0701

The vulnerability CVE-2000-0701 affects the Mailman project’s wrapper program in versions 2.0beta3 and 2.0beta4. The root cause is improper cleansing of untrusted format strings, which permits local privilege escalation. The NVD entry lists local attack vector with low complexity and partial impa...

4.6CVSS7AI score0.00389EPSS
CVE
CVE
added 2002/07/31 4:0 a.m.60 views

CVE-2000-1207

CVE-2000-1207 affects the userhelper component in the Red Hat Linux usermode package. It executes non-setuid programs as root, which prevents glibc security measures from activating. This creates a local exposure where vulnerable programs can be exploited via format string weaknesses in glibc, tr...

7.2CVSS7.2AI score0.15349EPSS
CVE
CVE
added 2000/02/04 5:0 a.m.53 views

CVE-1999-0798

CVE-1999-0798 : The vulnerability is a buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux caused by a malformed header type. This year‑old CVE is referenced across multiple feeds (NVD, Red Hat, CVE List) with consistent description. Impact described in sources as a buffer overflow affecting...

10CVSS7.6AI score0.01641EPSS
CVE
CVE
added 2002/03/09 5:0 a.m.50 views

CVE-1999-1288

CVE-1999-1288 concerns Samba 1.9.18, which ships with a prototype application wsmbconf installed with incorrect permissions (including setgid). This config allows local users to read/write files and, due to bugs in wsmbconf, may enable privilege elevation. The OpenVAS entry reiterates an elevate-...

4.6CVSS7.5AI score0.0046EPSS
CVE
CVE
added 2002/06/25 4:0 a.m.47 views

CVE-2001-0889

Exim vulnerable to remote command execution when redirecting to a pipe: Exim 3.22 and earlier fail to properly verify the local part of the address, allowing shell metacharacters to run arbitrary commands. Public details from CVE-2001-0889 describe impact as remote command execution with the Exim...

7.5CVSS7.4AI score0.06354EPSS