2005

The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and po

The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows

The krb5-send-pr script in the kerberos5 (krb5) package in Trustix Secure Linux 1.5 through 2.1, and possibly other oper

The lvmcreate_initrd script in the lvm package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating sys

The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users t

The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows lo

Multiple scripts in the perl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local us

The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attac

Firefox 1.0 does not invoke the Javascript Security Manager when a user drags a javascript: or data: URL to a tab, which

Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local use

useredit_account.wdm in Alt-N WebAdmin 3.0.4 does not properly validate account edits by the logged in user, which allow

getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitr

CUPS 1.1.20 and earlier records authentication information for a device URI in the error_log file, which allows local us

WarFTPD 1.82 RC9, when running as an NT service, allows remote authenticated users to cause a denial of service (access

getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an m

Debian GNU/Linux 3.0 installs the libpam-radius-auth package with the pam_radius_auth.conf set to be world-readable, whi

Firefox before 1.0 does not properly distinguish between user-generated and synthetic click events, which allows remote

zhcon before 0.2 does not drop privileges before reading a user configuration file, which allows local users to read arb

Internet Explorer 6 on Windows XP SP2 allows remote attackers to bypass the file download warning dialog and possibly tr

The change password functionality in Bottomline Webseries Payment Application does not require the old password when use

The cmdline pseudofiles in (1) procfs on FreeBSD 4.8 through 5.3, and (2) linprocfs on FreeBSD 5.x through 5.3, do not p

romload.c in DGen Emulator 1.23 and earlier allows local users to overwrite arbitrary files via a symlink attack on temp

main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite

The scm_send function in the scm layer for Linux kernel 2.4.x up to 2.4.28, and 2.6.x up to 2.6.9, allows local users to

Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption

Kerio Winroute Firewall before 6.0.9, ServerFirewall before 1.0.1, and MailServer before 6.0.5, when installed on Window

The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, a

The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local users to cause a denial

dispatch-conf in Portage 2.0.51-r2 and earlier allows local users to overwrite arbitrary files via a symlink attack on t

qpkg in Gentoolkit 0.2.0_pre10 and earlier allows local users to overwrite arbitrary files via a symlink attack on a tem

The mtink status monitor before 1.0.5 for Epson printers allows local users to overwrite arbitrary files via a symlink a

KDE 3.2.x and 3.3.0 through 3.3.2, when saving credentials that are (1) manually entered by the user or (2) created by t

SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands sent to CD devices that h

FluxBox 0.9.10 and earlier versions allows local users to cause a denial of service (application crash) by calling Xman

lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt th

lppasswd in CUPS 1.1.22, when run in environments that do not ensure that file descriptors 0, 1, and 2 are open when lpp

IglooFTP 0.6.1, when recursively uploading a directory, allows local users to overwrite the files that are being uploade

The slip_down function in slip.c for the uml_net program in uml-utilities 20030903, when uml_net is installed setuid roo

Race condition in Linux kernel 2.6 allows local users to read the environment variables of another process that is still

Race condition in SELinux 2.6.x through 2.6.9 allows local users to cause a denial of service (kernel crash) via SOCK_SE

Race condition in SuSE Linux 8.1 through 9.2, when run on SMP systems that have more than 4GB of memory, could allow loc