CVE-2001-0169

CVE-2001-0169 : The GNU C Library (glibc) fails to verify that libraries loaded via LD_PRELOAD into SUID/SGID processes are also non-SUID/non-SGID when they come from /etc/ld.so.cache, enabling a local user to pre-load a library from /lib or /usr/lib and overwrite privileged files. Documented in ...

CVE-2004-1335

The CVE-2004-1335 entry describes a memory leak in the Linux kernel’s ip_options_get function (pre-2.6.10) that can cause local denial of service via repeated ip_cmsg_send calls. Affected component is the kernel networking stack; impact is partial availability due to memory exhaustion. The vulner...

CVE-2001-0170

Technical specifics (affected product versions, root cause, mitigations, or exploit details) are not publicly provided in the supplied documents; monitor for updates.

CVE-2000-0336

Summary: CVE-2000-0336 affects the OpenLDAP server, where local users can modify arbitrary files via a symlink attack. The root cause described in connected Nessus/Mandrake entries is that OpenLDAP follows symbolic links when creating files, using a default location like /usr/tmp (symlinked to /t...

CVE-2003-0461

CVE-2003-0461 affects the Linux kernel 2.4.x family. The /proc/tty/driver/serial interface exposes the exact number of characters used in serial links, which could allow local users to infer sensitive information such as password lengths. Public advisories confirm fixes via kernel updates or acce...

CVE-2002-0080

CVE-2002-0080 affects rsync when run in daemon mode: it does not call setgroups before dropping privileges, potentially letting local users inherit supplementary group privileges and read files they shouldn’t. The vulnerability is demonstrated across multiple advisories (Mandrake/MDKSA-2002:024, ...

CVE-2000-0633

Technical details for CVE-2000-0633 are not publicly available in the provided documents. The description notes a local reboot/halt issue in the Mandrake Linux usermode package, but no specifics on affected versions, root cause, or fixes are supplied. Monitor for updates.

CVE-2004-1333

The CVE-2004-1333 entry describes an integer overflow in the vc_resize function of Linux kernel 2.4 and 2.6 before 2.6.10, which allows local users to trigger a kernel crash (DoS) via a short new screen value that leads to a buffer overflow. This is the only concrete detail provided in the initia...

CVE-1999-1496

CVE-1999-1496 affects Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 . Local users can infer the existence of arbitrary files by attempting to execute the target filename as a program, which yields different error messages depending on whether the file exists. This indicates a minor information-dis...

CVE-2001-0736

This CVE (CVE-2001-0736) affects the Pine email client (and pico editor) prior to version 4.33, where a local user can overwrite arbitrary files via a symlink attack. The vulnerability allows any local user to overwrite files owned by other users, including root, under certain conditions. A fix i...

CVE-2000-0531

CVE-2000-0531 : Linux gpm program vulnerability where local users can cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets. The NVD entry shows a LOCAL attack vector, LOW base severity, and PARTIAL availability impact; no remediation or workaround details are provided ...

CVE-1999-1332

Technical details about CVE-1999-1332 are not publicly provided in the connected documents you supplied; existing entries mention the vulnerability in gzexe but do not reveal affected versions, impact specifics, or fixes.

CVE-1999-1331

Affected software: netcfg 2.16-1 on Red Hat Linux 4.2. Vulnerability: Local users can control the Ethernet interface on reboot when a specific option is set, enabling a denial of service by shutting down the interface. Root cause/trigger: The description indicates the interface control occurs at ...

CVE-2000-0263

CVE-2000-0263 affects the X font server (xfs) on Red Hat Linux 6.x. A malformed request can cause a denial of service, impacting availability (CVSS v2 base score 2.1). Vector: local, low complexity, no authentication required; impact is limited to availability. No explicit remediation details are...

CVE-2007-3379

CVE-2007-3379 affects Red Hat Enterprise Linux 4 on x86_64 where the kernel may allow a local user to trigger a denial of service (OOPS). The description attributes the issue to vectors related to get_gate_vma and the fuser command, with the root cause details not explicitly provided in the sourc...

CVE-1999-1348

Technical details about CVE-1999-1348 are not publicly provided in the supplied documents. Monitor for updates; the available records describe the issue at a high level without specific impact, affected products, or remediation.

CVE-2000-0829

The affected software is the tmpwatch utility in Red Hat Linux. The vulnerability arises because it forks a new process for each directory level when scanning /tmp or /var/tmp , enabling a local attacker to create deeply nested directories and trigger a denial of service . Exploitation details ar...

CVE-2000-0184

The vulnerability CVE-2000-0184 affects the Linux printer subsystem via the printtool utility, which incorrectly sets printer configuration files to world-readable. This misconfiguration can allow a local attacker to read printer share passwords stored in those files, leading to potential unautho...

CVE-2000-0286

Technical details about CVE-2000-0286 are not publicly provided in the supplied documents. Monitor for updates from NVD/CVE feeds for affected products, fixes, and remediation guidance.

CVE-2000-0816

CVE-2000-0816 concerns the tmpwatch utility. The vulnerability arises when using the --fuser (or -s) option, where a local attacker can create a filename containing shell metacharacters that leads to execution of arbitrary commands via the system() call invoked by tmpwatch to consult /sbin/fuser....

CVE-2002-0069

CVE-2002-0069 concerns Squid 2.4 STABLE3 and earlier with three issues per Mandrake MDKSA-2002:016-1: (1) memory leak in the SNMP interface that could allow remote DoS; (2) FTP URL handling buffer overflow that could cause DoS and possibly remote code execution (not confirmed); (3) HTCP interface...

CVE-1999-1407

CVE-1999-1407 affects the ifdhcpc-done script used for configuring DHCP on Red Hat Linux 5. The vulnerability arises from a symlink attack against the dhcplog file, allowing local users to append text to arbitrary files. The provided sources describe the vulnerability and impact (local, partial i...

CVE-1999-1406

The CVE-1999-1406 issue concerns the dumpreg utility in Red Hat Linux 5.1, which opens /dev/mem with O_RDWR. The underlying effect is that a local user can crash the kernel by redirecting stdout (fd 1) to the kernel, enabling a denial of service. The available documents confirm the affected compo...