2002

The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generat

An interaction between Microsoft Outlook Web Access (OWA) with RSA SecurID allows local users to bypass the SecurID auth

bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly systems, uses the permissions of sy

clchkspuser and clpasswdremote in AIX expose an encrypted password in the cspoc.log file, which could allow local users

The rc system startup script for FreeBSD 4 through 4.5 allows local users to delete arbitrary files via a symlink attack

Vulnerability in swinstall for HP-UX 11.00 and 11.11 allows local users to view obtain data views for files that cannot

Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows authenticated users with editing privileges to delete other

The kqueue mechanism in FreeBSD 4.3 through 4.6 STABLE allows local users to cause a denial of service (kernel panic) vi

Directory traversal vulnerability in the web server used in RealPlayer 6.0.7, and possibly other versions, may allow loc

Race condition in bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating s

Race condition in the recursive (1) directory deletion and (2) directory move in GNU File Utilities (fileutils) 4.1 and

ktrace in BSD-based operating systems allows the owner of a process with special privileges to trace the process after i

Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sen

The encrypted loop device in Linux kernel 2.4.10 and earlier does not authenticate the entity that is encrypting data, w

xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows local users to modify files via a symlink attack on the .x

Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service (hang) b

Pipermail in Mailman stores private mail messages with predictable filenames in a world-executable directory, which allo

Vulnerability in passwd for HP-UX 11.00 and 11.11 allows local users to corrupt the password file and cause a denial of

Winamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the Temporary Internet Fil

Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers to

Alcatel 4400 installs the /chetc/shutdown command with setgid privileges, which allows many different local users to shu

The installation of Tarantella Enterprise 3 allows local users to overwrite arbitrary files via a symlink attack on the

NetScreen ScreenOS before 2.6.1 does not support a maximum number of concurrent sessions for a system, which allows an a

netstat in SGI IRIX before 6.5.12 allows local users to determine the existence of files on the system, even if the user

Gaim 0.57 stores sensitive information in world-readable and group-writable files in the /tmp directory, which allows lo

Runtime library in GNU Ada compiler (GNAT) 3.12p through 3.14p allows local users to modify files of other users via a s

PaintBBS 1.2 installs certain files and directories with insecure permissions, which allows local users to (1) obtain th

/dev/ipfilter on SGI IRIX 6.5 is installed by /dev/MAKEDEV with insecure default permissions (644), which could allow a

xkas in Xinet K-AShare 0.011.01 for IRIX allows local users to read arbitrary files via a symlink attack on the VOLICON

Compaq Intel PRO/Wireless 2011B LAN USB Device Driver 1.5.16.0 through 1.5.18.0 stores the 128-bit WEP (Wired Equivalent

Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via th

Nevrona Designs MiraMail 1.04 and earlier stores authentication information such as POP usernames and passwords in plain

Apple Palm Desktop 4.0b76 and 4.0b77 creates world-readable backup files and folders when a hotsync is performed, which

PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users

efax 0.9 and earlier, when installed setuid root, allows local users to read arbitrary files via the -d option, which pr

CDRDAO 1.1.4 and 1.1.5 allows local users to read arbitrary files via the show-data command.

Maelstrom GPL 3.0.1 allows local users to overwrite arbitrary files of other Maelstrom users via a symlink attack on the

rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide sup

bindsock in Lotus Domino 5.07 on Solaris allows local users to create arbitrary files via a symlink attack on temporary

Memory leak in SNMP in Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service.

create_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissio

GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack

xSANE 0.81 and earlier allows local users to modify files of other xSANE users via a symlink attack on temporary files.