CVE-2004-0801

CVE-2004-0801 affects foomatic-rip in Foomatic prior to 3.0.2 running under CUPS; the flaw allows local users or remote attackers with access to CUPS to execute arbitrary commands. The linked SUSE/OpenVAS entries confirm this CVE and reference patches in related updates (e.g., openSUSE hplip upda...

CVE-2001-0117

CVE-2001-0117 concerns diffutils’ sdiff 2.7, where sdiff creates temporary files insecurely, enabling a local user to overwrite files via a symlink attack. The issue affects diffutils in affected distributions (e.g., Red Hat advisories note a temporary-file handling vulnerability in sdiff). Explo...

CVE-2001-1030

CVE-2001-1030 affects the Squid proxy server when used in HTTP accelerator mode. The vulnerability exists if httpd_accel_host and http_accel_with_proxy are off, enabling an attacker to bypass ACLs and perform unauthorized activities such as port scanning. Concrete details from connected sources i...

CVE-2004-0432

ProFTPD 1.2.9 contains a logic issue where CIDR-based ACL directives in Allow and Deny are treated as if they were AllowAll, effectively bypassing access restrictions. This vulnerability allows FTP clients to bypass intended controls and potentially access or modify files that should be restricte...

CVE-2001-0142

CVE-2001-0142 affects squid 2.3 and earlier. The issue is a local symlink/race condition that can cause local users to overwrite arbitrary files via temporary file handling in certain configurations. Impact is described as local privilege/content modification without remote access; CVSS reflects ...

CVE-2004-0686

CVE-2004-0686 describes a buffer overflow in Samba when the mangling method = hash option is enabled in smb.conf, affecting Samba 2.2.x (up to 2.2.9) and 3.0.0 to 3.0.4. The Initial Description notes unknown impact and attack vectors, but connected OpenVAS records classify it with high severity (...

CVE-2004-0415

The CVE-2004-0415 issue affects the Linux kernel where 64-bit file offset pointers are not reliably converted to 32 bits, enabling a local unprivileged user to access portions of kernel memory. An attacker can leverage this through file I/O paths that manipulate 32/64-bit offset conversions, pote...

CVE-2000-0867

Kernel logging daemon (klogd) in Linux (sysklogd) is vulnerable due to a 'format bug' that fails to cleanse user-supplied format strings, enabling local users to gain root privileges by triggering malformed kernel messages. Mandrake MDKSA-2000:050-1 describes a patched klogd version; Debian patch...

CVE-2005-1410

The connected documents confirm CVE-2005-1410 affects the PostgreSQL tsearch2 module (versions 7.4–8.0.x). The root cause is misdeclaring several tsearch2 functions as internal when they do not take an internal argument, enabling SQL calls to other internal-argument functions and potentially caus...

CVE-2004-2546

CVE-2004-2546 affects Samba up to 3.0.6, with multiple memory leaks that can cause a denial of service via memory consumption. The record consistently states Samba before 3.0.6 is vulnerable; the impact is a DoS, not arbitrary code execution. Remediation mentioned in sources is upgrading to Samba...

CVE-2000-0917

CVE-2000-0917 describes a format-string vulnerability in LPRng’s use_syslog() in version 3.6.24 (and earlier), enabling remote attackers to execute arbitrary commands. Multiple sources corroborate: Red Hat RHSA-2000-065 notes vulnerability in 3.6.24 and earlier; CERT advisories document the forma...

CVE-2002-1319

The CVE-2002-1319 issue affects the Linux kernel on x86, specifically versions 2.4.20 and earlier and 2.5.x. The root cause is a flaw in emulation mode where TF and NT EFLAGS are not properly cleared, enabling a local user to cause a denial of service (hang). The impact is a local DoS without rem...

CVE-2000-1009

CVE-2000-1009 concerns Red Hat Linux 6.2 where the backup tool dump relies on the RSH environment variable to decide which program to run remotely. The pathname specified by RSH is trusted, enabling local users to substitute a Trojan horse program and gain root privileges. The root cause is impro...

CVE-2004-2044

CVE-2004-2044 affects PHP-Nuke 7.3 and related products that use the PHP-Nuke codebase (e.g., Nuke Cops betaNC bundle, OSCNukeLite 3.1, OSC2Nuke 7x). It arises from improper use of eregi() with $_SERVER['PHP_SELF'] to identify the calling script, enabling remote attackers to directly access scrip...

CVE-2000-0791

CVE-2000-0791 describes a Trustix vulnerability where the httpsd binary (Apache-SSL) is installed with world-writeable permissions, enabling local users to replace it with a Trojan horse. The root cause is improper permissions on the httpsd executable, allowing local write access and substitution...