2002

The installation of Geeklog 1.3 creates an extra group_assignments record which is not properly deleted, which causes th

CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a

Buffer overflow in ClanLib library 0.5 may allow local users to execute arbitrary code in games that use the library, su

Buffer overflow in efax 0.9 and earlier, when installed setuid root, allows local users to execute arbitrary code via a

Buffer overflow in Chinput 3.0 allows local users to execute arbitrary code via a long HOME environment variable.

CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configu

Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compi

vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it ea

Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co (color databa

LogWatch 2.5 allows local users to gain root privileges via a symlink attack, a different vulnerability than CVE-2002-01

Buffer overflow in Multiple UNC Provider (MUP) in Microsoft Windows operating systems allows local users to cause a deni

Funk Software Proxy Host 3.x is installed with insecure permissions for the registry and the file system.

Funk Software Proxy Host 3.x uses weak encryption for the Proxy Host password, which allows local users to gain privileg

Buffer overflow in sar for OpenServer 5.0.5 allows local users to gain root privileges via a long -o parameter.

Buffer overflow in cpr for the eoe.sw.cpr SGI Checkpoint-Restart Software package on SGI IRIX 6.5.10 and earlier may all

setlicense for TOLIS Group Backup and Restore Utility (BRU) 17.0 allows local users to overwrite arbitrary files via a s

Format string vulnerability in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 a

Buffer overflow in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allow

Buffer overflow in the vpnclient program for UNIX VPN Client before 3.5.2 allows local users to gain administrative priv

nsd on SGI IRIX before 6.5.11 allows local users to overwrite arbitrary files and gain root privileges via a symlink att

uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file

Buffer overflow in hanterm 3.3.1 and earlier allows local users to execute arbitrary code via a long string in the (1) -

Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privil

Buffer overflows in wmtv 0.6.5 and earlier may allow local users to gain privileges.

wmtv 0.6.5 and earlier allows local users to modify arbitrary files via a symlink attack on a configuration file.

Identix BioLogon 3 allows users with physical access to the system to gain administrative privileges by using CTRL-ALT-D

Vulnerability in XFS filesystem reorganizer (fsr_xfs) in SGI IRIX 6.5.10 and earlier allows local users to gain root pri

Unknown vulnerability in rpc.passwd in the nfs.sw.nis subsystem of SGI IRIX 6.5.15 and earlier allows local users to gai

Buffer overflow in Century Software TERM allows local users to gain root privileges via a long tty argument to the calli

Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Ser

The Windows Media Device Manager (WMDM) Service in Microsoft Windows Media Player 7.1 on Windows 2000 systems allows loc

mail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape character in a message even when it is not in interactive mode,

Aprelium Abyss Web Server (abyssws) before 1.0.3 stores the administrative console password in plaintext in the abyss.co

FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to write to or read from res

Unknown vulnerability in nveventd in NetVisualyzer on SGI IRIX 6.5 through 6.5.16 allows local users to write arbitrary

The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not "time out" an inactive administrator sessio

CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the tr

Buffer overflow in dlvr_audit for Caldera OpenServer 5.0.5 and 5.0.6 allows local users to gain root privileges.

Format string vulnerability in crontab for SCO OpenServer 5.0.5 and 5.0.6 allows local users to gain privileges via form

Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via

Format string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd package may allow local users

Ecartis (formerly Listar) 1.0.0 in snapshot 20020125 and earlier does not properly drop privileges when Ecartis is insta

PHPNetToolpack 0.1 relies on its environment's PATH to find and execute the traceroute program, which could allow local

Gravity Storm Service Pack Manager 2000 creates a hidden share (SPM2000c$) mapped to the C drive, which may allow local

Intellisol Xpede 4.1 uses weak encryption to store authentication information in cookies, which could allow local users

Format string vulnerability in log_print() function of Posadis DNS server before version m5pre2 allows local users and p

Buffer overflow in newt.c of newt windowing library (libnewt) 0.50.33 and earlier may allow attackers to cause a denial

Buffer overflow in X11 library (libX11) on Caldera Open UNIX 8.0.0, UnixWare 7.1.1, and possibly other operating systems

Vulnerability in (1) inews or (2) rnews for INN 2.2.3 and earlier, related to insecure open() calls.