2001

rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to re

fetchmailconf in fetchmail before 5.7.4 allows local users to overwrite files of other users via a symlink attack on tem

imwheel-solo in imwheel package allows local users to modify arbitrary files via a symlink attack from the .imwheelrc fi

POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with predi

oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on

ns6install installation script for Netscape 6.01 on Solaris, and other versions including 6.2.1 beta, allows local users

Sage Software MAS 200 allows remote attackers to cause a denial of service by connecting to port 10000 and entering a se

vi as included with SCO OpenServer 5.0 - 5.0.6 allows a local attacker to overwrite arbitrary files via a symlink attack

Digital Creations Zope 2.3.1 b1 and earlier allows a local attacker (Zope user) with through-the-web scripting capabilit

Digital Creations Zope 2.3.1 b1 and earlier contains a problem in the method return values related to the classes (1) Ob

IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service (hang) via long (1) SEL

NetScreen ScreenOS prior to 2.5r6 on the NetScreen-10 and Netscreen-100 can allow a local attacker to bypass the DMZ 'de

Vulnerability in a system call in BSDI 3.0 and 3.1 allows local users to cause a denial of service (reboot) in the kerne

rcs2log, as used in Emacs 20.4, xemacs 21.1.10 and other versions before 21.4, and possibly other packages, allows local

Windows NT 4.0 SP 6a allows a local user with write access to winnt/system32 to cause a denial of service (crash in lsas

iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server (NAS) LDAP

QNX 2.4 allows a local user to read arbitrary files by directly accessing the mount point for the FAT disk partition, e.

VMWare creates a temporary file vmware-log.USERNAME with insecure permissions, which allows local users to read or modif

Windows 2000 and Windows NT allows local users to cause a denial of service (reboot) by executing a command at the comma

sendmsg function in NetBSD 1.3 through 1.5 allows local users to cause a denial of service (kernel trap or panic) via a

Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Hor

Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensit

Microsoft Windows 2000 telnet service allows a local user to make a certain system call that allows the user to terminat

The change password option in the Windows Security interface for Windows 2000 allows attackers to use the option to atte

Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during

Directory traversal vulnerability in Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files durin

Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via filenames in

Directory traversal vulnerability in the console version of PKZip (pkzipc) 4.00 and earlier allows attackers to overwrit

Directory traversal vulnerability in rar 2.02 and earlier allows attackers to overwrite arbitrary files during archive e

AllCommerce with debugging enabled in EnGarde Secure Linux 1.0.1 creates temporary files with predictable names, which a

xinetd 2.1.8 and earlier runs with a default umask of 0, which could allow local users to read or modify files that are

Lmail 2.7 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.

Vulnerability in exuberant-ctags before 3.2.4-0.1 insecurely creates temporary files.

ppd in Reliant Sinix allows local users to corrupt arbitrary files via a symlink attack in the /tmp/ppd.trace file.

Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue qu

Preview version of Timbuktu for Mac OS X allows local users to modify System Preferences without logging in via the Abou

Cisco CBOS 2.3.0.053 sends output of the "sh nat" (aka "show nat") command to the terminal of the next user who attempts

readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local

sgml-tools (aka sgmltools) before 1.0.9-15 creates temporary files with insecure permissions, which allows other users t

Kerberos 4 (aka krb4) allows local users to overwrite arbitrary files via a symlink attack on new ticket files.

Utah-glx in Mesa before 3.3-14 on Mandrake Linux 7.2 allows local users to overwrite arbitrary files via a symlink attac

pcltotiff in HP-UX 10.x has unnecessary set group id permissions, which allows local users to cause a denial of service.

ispell before 3.1.20 allows local users to overwrite files of other users via a symlink attack on a temporary file.

ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malfor

The default configuration of the Dr. Watson program in Windows NT and Windows 2000 generates user.dmp crash dump files w

vim (aka gvim) allows local users to modify files being edited by other users via a symlink attack on the backup and swa

makewhatis in the man package before 1.5i2 allows an attacker in group man to overwrite arbitrary files via a man page w

kmmodreg in HP-UX 11.11, 11.04 and 11.00 allows local users to create arbitrary world-writeable files via a symlink atta

ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES-1 magic phrase generate

VShell SSH gateway 1.0.1 and earlier has a default port forwarding rule of 0.0.0.0/0.0.0.0, which could allow local user