2001

The default configuration of McAfee VirusScan 4.5 does not quote the ImagePath variable, which improperly sets the searc

fshd (fsh daemon) in Debian GNU/Linux allows local users to overwrite files of other users via a symlink attack.

elvis-tiny before 1.4-10 in Debian GNU/Linux, and possibly other Linux operating systems, allows local users to overwrit

GNU ed before 0.2-18.1 allows local users to overwrite the files of other users via a symlink attack.

Recourse ManTrap 1.6 allows attackers who have gained root access to use utilities such as crash or fsdb to read /dev/me

Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary commands via a long string to

The installation of VolanoChatPro chat server sets world-readable permissions for its configuration file and stores the

ghostscript before 5.10-16 uses an empty LD_RUN_PATH environmental variable to find libraries in the current directory,

Buffer overflow in cmctl program in Oracle 8.1.5 Connection Manager Control allows local users to gain privileges via a

The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a scr

crontab by Paul Vixie uses predictable file names for a temporary file and does not properly ensure that the file is own

ghostscript before 5.10-16 allows local users to overwrite files of other users via a symlink attack.

registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the origi

StarOffice 5.2 follows symlinks and sets world-readable permissions for the /tmp/soffice.tmp directory, which allows a l

The xp_showcolv function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the len

Recourse ManTrap 1.6 does not properly hide processes from attackers, which could allow attackers to determine that they

Recourse ManTrap 1.6 modifies the kernel so that ".." does not appear in the /proc listing, which allows attackers to de

Recourse ManTrap 1.6 generates an error when an attacker cd's to /proc/self/cwd and executes the pwd command, which allo

Recourse ManTrap 1.6 hides the first 4 processes that run on a Solaris system, which allows attackers to determine that

Recourse ManTrap 1.6 sets up a chroot environment to hide the fact that it is running, but the inode number for the resu

Recourse ManTrap 1.6 allows attackers to cause a denial of service via a sequence of commands that navigate into and out

Cisco SN 5420 Storage Router 1.1(3) and earlier allows local users to access a developer's shell without a password and

WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hija

Lucent/ORiNOCO WaveLAN cards generate predictable Initialization Vector (IV) values for the Wireless Encryption Protocol

Cisco 340-series Aironet access point using firmware 11.01 does not use 6 of the 24 available IV bits for WEP encryption

Cisco AP340 base station produces predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoo