2001

Buffer overflow in ipcs in Solaris 7 x86 allows local users to execute arbitrary code via a long TZ (timezone) environme

BubbleMon 1.31 does not properly drop group privileges before executing programs, which allows local users to execute ar

Buffer overflow in dtsession on Solaris, and possibly other operating systems, allows local users to gain privileges via

Buffer overflow in whodo in Solaris SunOS 5.5.1 through 5.8 allows local users to execute arbitrary code via a long (1)

FreeBSD 4.3 does not properly clear shared signal handlers when executing a process, which allows local users to gain pr

Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable.

Dynamically Loadable Kernel Module (dlkm) static kernel symbol table in HP-UX 11.11 is not properly configured, which al

xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell

Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks

Vulnerability in Scanner Access Now Easy (SANE) before 1.0.5, related to pnm and saned.

expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gai

An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privi

Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, whic

Arkeia backup server 4.2.8-2 and earlier creates its database files with world-writable permissions, which could allow l

Buffer overflows in Pileup before 1.2 allows local users to gain root privileges via (1) long command line arguments, or

Vulnerability in MasqMail before 0.1.15 allows local users to gain privileges via piped aliases.

Zetetic Secure Tool for Recalling Important Passwords (STRIP) 0.5 and earlier for the PalmOS allows a local attacker to

Buffer overflow in dsh in dqs 3.2.7 in SuSE Linux 7.0 and earlier, and possibly other operating systems, allows local us

Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x includes a debug version of FNDPUB

OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named 'cookies' v

Buffer overflow in libi18n library in IBM AIX 5.1 and 4.3.x allows local users to gain root privileges via a long LANG e

SSH Secure Shell 3.0.0 on Unix systems does not properly perform password authentication to the sshd2 daemon, which allo

crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification ope

minicom 1.83.1 and earlier allows a local attacker to gain additional privileges via numerous format string attacks.

Microsoft Word 2000 does not check AutoRecovery (.asd) files for macros, which allows a local attacker to execute arbitr

The Nirvana Editor (NEdit) 5.1.1 and earlier allows a local attacker to overwrite other users' files via a symlink attac

recon in SCO OpenServer 5.0 through 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow

deliver program in MMDF 2.43.3b in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a b

ftpdownload in Computer Associates InoculateIT 6.0 allows a local attacker to overwrite arbitrary files via a symlink at

Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additional

The (1) dump and (2) dump_lfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow

lpsystem in OpenUnix 8.0.0 allows local users to cause a denial of service and possibly execute arbitrary code via a lon

ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories be

dbsnmp in Oracle 8.0.5 and 8.1.5, under certain conditions, trusts the PATH environment variable to find and execute the

Vulnerability in HP Process Resource Manager (PRM) C.01.08.2 and earlier, as used by HP-UX Workload Manager (WLM), allow

GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename

Buffer overflow in mana in OpenServer 5.0.6a and earlier allows local users to execute arbitrary code.

Buffer overflow in uidadmin in Caldera Open Unix 8.0.0 and UnixWare 7 allows local users to gain root privileges via a l

libCoolType library as used in Adobe Acrobat (acroread) on Linux creates the AdobeFnt.lst file with world-writable permi

Buffer overflow in swverify in HP-UX 11.0, and possibly other programs, allows local users to gain privileges via a long

rmuser utility in FreeBSD 4.2 and 4.3 creates a copy of the master.passwd file with world-readable permissions while upd

Vulnerability in screen before 3.9.10, related to a multi-attach error, allows local users to gain root privileges when

Buffer overflow in msgchk in Digital UNIX 4.0G and earlier allows local users to execute arbitrary code via a long comma

speechd 0.54 and earlier, with the Festival or rsynth speech synthesis package, allows attackers to execute arbitrary co

Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes

IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges v

Buffer overflow in cb_reset in the System Service Processor (SSP) package of SunOS 5.8 allows a local user to execute ar

Buffer overflow in ptexec in the Sun Validation Test Suite 4.3 and earlier allows a local user to gain privileges via a

Buffer overflow in fbglyph.c in XFree86 before 4.2.0, related to glyph clipping for large origins, allows attackers to c

Format string vulnerability in Hylafax on FreeBSD allows local users to execute arbitrary code via format specifiers in