2001

WinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local users to obtain unathor

Buffer overflow in uuq in AIX 4 could allow local users to execute arbitrary code via a long -r parameter.

Buffer overflows in muxatmd in AIX 4 allows an attacker to cause a core dump and possibly execute code.

Buffer overflow in su-wrapper 1.1.1 allows local users to execute arbitrary code via a long first argument.

BisonFTP V4R1 allows local users to access directories outside of their home directory by uploading .bdl files, which ca

GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, which allows local users to gain p

Buffer overflows and other vulnerabilities in multiple Common Desktop Environment (CDE) modules in HP-UX 10.10 through 1

Tripwire 1.3.1, 2.2.1 and 2.3.0 allows local users to overwrite arbitrary files and possible gain privileges via a symbo

LPRng in Red Hat Linux 7.0 and 7.1 does not properly drop memberships in supplemental groups when lowering privileges, w

Sendmail before 8.12.1 does not properly drop privileges when the -C option is used to load custom configuration files,

Buffer overflow in Compaq Management Agents before 5.2, included in Compaq Web-enabled Management Software, allows local

Buffer overflow in mcedit in Midnight Commander 4.5.1 allows local users to cause a denial of service (segmentation faul

vi.recover in OpenBSD before 3.1 allows local users to remove arbitrary zero-byte files such as device nodes.

dbsnmp in Oracle 8.1.6 and 8.1.7 uses the ORACLE_HOME environment variable to find and execute the dbsnmp program, which

Buffer overflow in dbsnmp in Oracle 8.0.6 through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_H

Unknown vulnerability in Oracle Label Security in Oracle 8.1.7 and 9.0.1, when audit functionality, SET_LABEL, or SQL*Pr

Vulnerability in DECwindows Motif Server on OpenVMS VAX or Alpha 6.2 through 7.3, and SEVMS VAX or Alpha 6.2, allows loc

join.cfm in e-Zone Media Fuse Talk allows a local user to execute arbitrary SQL code via a semi-colon (;) in a form vari

Common Cryptographic Architecture (CCA) in IBM 4758 allows an attacker with physical access to the system and Combine_Ke

Buffer overflow in pppattach and other linked PPP utilities in Caldera Open Unix 8.0 and UnixWare 7.1.0 and 7.1.1 allows

wmtv 0.6.5 and earlier does not properly drop privileges, which allows local users to execute arbitrary commands via the

The default PAM files included with passwd in Mandrake Linux 8.1 do not support MD5 passwords, which could result in a l

IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which al

klprfax_filter in KDE2 KDEUtils allows local users to overwrite arbitrary files via a symlink attack on the klprfax.filt

Magic eDeveloper Enterprise Edition 8.30-5 and earlier allows local users to overwrite arbitrary files and possibly exec

ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by i

Buffer overflow in glob function of glibc allows attackers to cause a denial of service (crash) and possibly execute arb

The Domain gateway in BEA Tuxedo 7.1 does not perform authorization checks for imported services and qspaces on remote d

popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute commands

Unknown vulnerability in the file system protection subsystem in HP Secure OS Software for Linux 1.0 allows additional u

Buffer overflow in lpstat in SCO OpenServer 5.0 through 5.0.6a allows local users to execute arbitrary code as group bin

geteuid in Itanium Architecture (IA) running on HP-UX 11.20 does not properly identify a user's effective user id, which

run.cgi in Webmin 0.80 and 0.88 creates temporary files with world-writable permissions, which allows local users to exe

Slashcode 2.0 creates new accounts with an 8-character random password, which could allow local users to obtain session

Buffer overflow in setiathome for SETI@home 3.03, if installed setuid, could allow local users to execute arbitrary code

pt_chmod in Solaris 8 does not call fdetach to reset terminal privileges when users log out of terminals, which allows l

Buffer overflow in cron in Caldera UnixWare 7 allows local users to execute arbitrary code via a command line argument.

The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a scr

Cross-site scripting (XSS) vulnerability in phpReview 0.9.0 rc2 and earlier allows remote attackers to inject arbitrary

Cross-site scripting (XSS) vulnerability in im.php in IMessenger for PHP-Nuke allows remote attackers to inject arbitrar

Cross-site scripting (XSS) vulnerability in the DMOZGateway module for PHP-Nuke allows remote attackers to inject arbitr

Cross-site scripting (XSS) vulnerability in PHP-Nuke 5.3.1 and earlier allows remote attackers to inject arbitrary web s

Cross-site scripting (XSS) vulnerability in the comments action in index.php in easyNews 1.5 and earlier allows remote a

Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and (3) ssh-1 up to version

crontab by Paul Vixie uses predictable file names for a temporary file and does not properly ensure that the file is own

ghostscript before 5.10-16 allows local users to overwrite files of other users via a symlink attack.

Race condition in ptrace in Linux kernel 2.4 and 2.2 allows local users to gain privileges by using ptrace to track and

Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly co

Lmail 2.7 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.

vi as included with SCO OpenServer 5.0 - 5.0.6 allows a local attacker to overwrite arbitrary files via a symlink attack