2005

The DNTUS26 process in Dameware NT Utilities and the DWRCS process in MiniRemote Control 4.9 and earlier stores the user

Musicmatch 10.00.2047 and earlier store log files in the Program Files directory instead of the user profile, which may

The (1) it87 and (2) via686a drivers in I2C for Linux 2.6.x before 2.6.11.8, and 2.6.12 before 2.6.12-rc2, create the sy

Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setui

Race condition in rpdump in Pine 4.62 and earlier allows local users to overwrite arbitrary files via a symlink attack.

Race condition in JFS2 on AIX 5.2 and 5.3, when deleting a file while I/O is still occurring for that file, may write da

Unquoted Windows search path vulnerability in BitDefender 8 allows local users to prevent BitDefender from starting by c

The key_user_lookup function in security/keys/key.c in Linux kernel 2.6.10 to 2.6.11.8 may allow attackers to cause a de

DelphiTurk FTP 1.0 stores usernames and passwords in the profile.dat file, which allows local users to gain privileges.

DelphiTurk CodeBank (aka KodBank) 3.1 and earlier stores usernames and passwords in the Codebank registry key, which all

The (1) check_update.sh and (2) rkhunter script in Rootkit Hunter before 1.2.3-r1 create temporary files with predictabl

The SIOCGIFCONF ioctl (ifconf function) in FreeBSD 4.x through 4.11 and 5.x through 5.4 does not properly clear a buffer

Unknown vulnerability in the Linux kernel before 2.4.23, on the AMD AMD64 and Intel EM64T architectures, associated with

Unknown vulnerability in the system call filtering code in the audit subsystem for Red Hat Enterprise Linux 3 allows loc

The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlappi

The coda_pioctl function in the coda functionality (pioctl.c) for Linux kernel 2.6.9 and 2.4.x before 2.4.29 may allow l

nProtect:Netizen 2005.3.17.1 does not properly verify that the update module is downloaded from an authorized site, whic

Firefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display, which may allow remote ma

Firefox before 1.0 and Mozilla before 1.7.5 display the SSL lock icon when an insecure page loads a binary file from a t

AFP Server in Mac OS X before 10.3.8 uses insecure permissions for "Drop Boxes," which allows local users to read the co

The daemon for fallback-reboot before 0.995 allows attackers to cause a denial of service (daemon exit), possibly relate

Unknown vulnerability in the systems message queue in HP Tru64 Unix 4.0F PK8 through 5.1B-2/PK4 allows local users to ca

Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel

Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cook

The SDL port of abuse (abuse-SDL) before 2.00 does not properly drop privileges before creating certain files, which all

Multiple integer signedness errors in the sg_scsi_ioctl function in scsi_ioctl.c for Linux 2.6.x allow local users to re

Linux kernel 2.4.x and 2.6.x allows local users to cause a denial of service (CPU and memory consumption) and bypass RLI

Gene6 FTP Server does not properly restrict access to the control console, which allows local users to modify the server

Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote attackers to spoof the SSL "secure site" lock icon via (1) a

Einstein 1.0 stores credit card information in plaintext in the world-readable wallets.dat file, which allows local user

fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to gain sensitive information by cal

fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to delete arbitrary files or create

Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypas

sendpm.php in PBLang 4.63 allows remote authenticated users to read arbitrary files via a full pathname in the orig para

delpm.php in PBLang 4.63 allows remote authenticated users to delete arbitrary PM files by modifying the "id" and "a" pa

Einstein 1.0.1 stores sensitive information such as usernames and passwords in plaintext in the registry, which allows l

reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local us

reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive information such as smtpuser a

cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows loc

The logging feature in kcms_configure in the KCMS package on Solaris 8 and 9, and possibly other versions, allows local

PeerFTP_5 stores sensitive information such as passwords in plaintext in the PeerFTP.ini files, which allows local users

eXeem 0.21 stores sensitive information such as passwords in plaintext in the Exeem registry key, which allows local use

SendLink 1.5 stores sensitive information, possibly including passwords, in plaintext in the data.eat file, which allows

Multiple directory traversal vulnerabilities in unace 1.2b allow attackers to overwrite arbitrary files via an ACE archi

Some futex functions in futex.c for Linux kernel 2.6.x perform get_user calls while holding the mmap_sem semaphore, whic

Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when running on x86 with the hugemem

vsdatant.sys in Zone Lab ZoneAlarm before 5.5.062.011, ZoneAlarm Wireless before 5.5.080.000, Check Point Integrity Clie

lspath in AIX 5.2, 5.3, and possibly earlier versions, does not drop privileges before processing the -f option, which a

The (1) autopoint and (2) gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secu

The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary