1999

IBM Netfinity Remote Control allows local users to gain administrator privileges by starting programs from the process m

Vulnerabilities in the KDE kvt terminal program allow local users to gain root privileges.

The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which

The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges.

SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, which al

Buffer overflow in Xi Graphics Accelerated-X server allows local users to gain root access via a long display or query p

Buffer overflow in VMWare 1.0.1 for Linux via a long HOME environmental variable.

Windows NT searches a user's home directory (%systemroot% by default) before other directories to find critical programs

HP CDE program includes the current directory in root's PATH variable.

Linux 2.0.37 does not properly encode the Custom segment limit, which allows local users to gain root privileges by acce

BMC PATROL SNMP Agent before 3.2.07 allows local users to create arbitrary world-writeable files as root by specifying t

Vulnerability in a script in Texas A&M University (TAMU) Tiger allows local users to execute arbitrary commands as the T

GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (

Ethereal allows local users to overwrite arbitrary files via a symlink attack on the packet capture file.

.sbstart startup script in AcuShop Salesbuilder is world writable, which allows local users to gain privileges by append

The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve.

Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user

Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file (sc_serv.conf), which

The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulne

Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental varia

Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab

Buffer overflows in Mars NetWare Emulation (NWE, mars_nwe) package via long directory names.

Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable.

SCO Doctor allows local users to gain root privileges through a Tools option.

The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack.

Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a lo

Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field.

Buffer overflow in sccw allows local users to gain root access via the HOME environmental variable.

named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to gain root access via t

Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in program

Buffer overflow in (1) nlservd and (2) rnavc in Knox Software Arkeia backup product allows local users to obtain root ac

Mediahouse Statistics Server allows remote attackers to read the administrator password, which is stored in cleartext in

Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line ar

UnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE environmental variable to find a

shell-lock in Cactus Software Shell Lock allows local users to read or modify decoded shell files before they are execut

Buffer overflows in Linux cdwtools 093 and earlier allows local users to gain root privileges.

Buffer overflow in rpc.yppasswdd allows a local user to gain privileges via MD5 hash generation.

ypserv allows a local user to modify the GECOS and login shells of other users.

ypserv allows local administrators to modify password tables.

Buffer overflow in SCO UnixWare Xsco command via a long argument.

runtar in the Amanda backup system used in various UNIX operating systems executes tar with root privileges, which allow

Buffer overflow in uum program for Canna input system allows local users to gain root privileges.

Buffer overflow in canuum program for Canna input system allows local users to gain root privileges.

Buffer overflows in Windows NT 4.0 print spooler allow remote attackers to gain privileges or cause a denial of service

The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that

Buffer overflow in faxalter in hylafax 4.0.2 allows local users to gain privileges via a long -m command line argument.

Buffer overflow in sar for SCO OpenServer 5.0.0 through 5.0.5 may allow local users to gain root privileges via a long -

Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable.

Buffer overflow in Linux su command gives root access to local users.

Buffer overflow in SCO su program allows local users to gain root access via a long username.