2003

Bugzilla 2.16.x before 2.16.3, 2.17.x before 2.17.4, and earlier versions allows local users to overwrite arbitrary file

WatchGuard ServerLock for Windows 2000 before SL 2.0.4 allows local users to access kernel memory via a symlink attack o

eroaster before 2.2.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file that is u

Sustworks IPNetSentryX and IPNetMonitorX allow local users to sniff network packets via the setuid helper applications (

Unknown vulnerability in the libcpr library for the Checkpoint/Restart (cpr) system on SGI IRIX 6.5.21f and earlier allo

A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc

Unknown vulnerability in Solaris 2.6 through 9 causes a denial of service (system panic) via "a rare race condition" or

Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write access to a local directory

Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an e-mail message containing a uuencode

VMware Workstation 4.0 for Linux allows local users to overwrite arbitrary files and gain privileges via "symlink manipu

Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allows

The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the cal

The /proc filesystem in Linux allows local users to obtain sensitive information by opening various entries in /proc/sel

Integer signedness error in the Linux Socket Filter implementation (filter.c) in Linux 2.4.3-pre3 to 2.4.22-pre10 allows

dexconf in XFree86 Xserver 4.1.0-2 creates the /dev/dri directory with insecure permissions (666), which allows local us

Portmon 1.7 and possibly earlier versions allows local users to read and write arbitrary files via the (1) -c (host file

Multiple vulnerabilities in noweb 2.9 and earlier creates temporary files insecurely, which allows local users to overwr

eldav WebDAV client for Emacs, version 0.7.2 and earlier, allows local users to create or overwrite arbitrary files via

Unknown vulnerability in patches 108993-14 through 108993-19 and 108994-14 through 108994-19 for Solaris 8 may allow loc

znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files.

The ioperm system call in Linux kernel 2.4.20 and earlier does not properly restrict privileges, which allows local user

Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 5.x through 6.5 allows remote attackers to s

Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters bet

stunnel 4.0.3 and earlier allows attackers to cause a denial of service (crash) via SIGCHLD signal handler race conditio

BitchX IRC client 1.0c20cvs and earlier allows attackers to cause a denial of service (core dump) via certain channel mo

psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link attack on the /tmp/bef

ps2epsi creates insecure temporary files when calling ghostscript, which allows local attackers to overwrite arbitrary f

Memory leak in lofiadm in Solaris 8 allows local users to cause a denial of service (kernel memory consumption).

SHOUTcast 1.8.9 and earlier allows local users to obtain the cleartext administrative password via a GET request to port

ptrace on HP-UX 11.00 through 11.11 allows local users to cause a denial of service (data page fault panic) via "an inco

mv in IRIX 6.5 creates a directory with world-writable permissions while moving a directory, which could allow local use

NetBSD 1.4 through 1.6 beta allows local users to cause a denial of service (kernel panic) via a series of calls to the

Symbolic link vulnerability in xbreaky before 0.5.5 allows local users to overwrite arbitrary files via a symlink from t

Web Server 4D (WS4D) 3.6 stores passwords in plaintext in the Ws4d.4DD file, which allows attackers to gain privileges.

The code for writing reg files in Samba before 2.2.8 allows local users to overwrite arbitrary files via a race conditio

adb2mhc in the mhc-utils package before 0.25+20010625-7.1 allows local users to overwrite arbitrary files via a symlink

Unknown vulnerability in UFS for Solaris 9 for SPARC, with logging enabled, allows local users to cause a denial of serv

A patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with read/write privileges of

The DEC UDK processing feature in the xterm terminal emulator in XFree86 4.2.99.4 and earlier allows attackers to cause

The DEC UDK processing feature in the hanterm (hanterm-xf) terminal emulator before 2.0.5 allows attackers to cause a de

Linux kernel 2.4.10 through 2.4.21-pre4 does not properly handle the O_DIRECT feature, which allows local attackers with

slapd in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows local users to overwrite arbitrary files via a race condition d

Unknown vulnerability in mail for Solaris 2.6 through 9 allows local users to read the email of other users.

faxspool in mgetty before 1.1.29 uses a world-writable spool directory for outgoing faxes, which allows local users to m

Internet Message (IM) 141-18 and earlier uses predictable file and directory names, which allows local users to (1) obta

The data collection script for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 sets world-

rpc.walld (wall daemon) for Solaris 2.6 through 9 allows local users to send messages to logged on users that appear to