CVE-2002-1565 | | | 2003-06-16 | Buffer overflow in url_filename function for wget 1.8.1 allows attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code… |
CVE-2000-1208 | | | 2002-08-12 | Format string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges via an improper sys… |
CVE-2002-0083 | Critical | 9.8 | 2002-03-15 | Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges. |
CVE-2001-0738 | | | 2001-10-18 | LogLine function in klogd in sysklogd 1.3 in various Linux distributions allows an attacker to cause a denial of service (hang) by causing null bytes to be pla… |
CVE-2001-0736 | | | 2001-10-18 | Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink at… |
CVE-2001-0641 | | | 2001-09-20 | Buffer overflow in man program in various distributions of Linux allows local user to execute arbitrary code as group man via a long -S option. |
CVE-2001-1030 | | | 2001-07-18 | Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings a… |
CVE-2001-0473 | | | 2001-06-27 | Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands. |
CVE-2001-0416 | | | 2001-06-27 | sgml-tools (aka sgmltools) before 1.0.9-15 creates temporary files with insecure permissions, which allows other users to read files that are being processed b… |
CVE-2001-0170 | | | 2001-03-26 | glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid program… |
CVE-2001-0143 | | | 2001-03-12 | vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack. |
CVE-2001-0142 | | | 2001-03-12 | squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations. |
CVE-2001-0140 | | | 2001-03-12 | arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations. |
CVE-2001-0139 | | | 2001-03-12 | inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations. |
CVE-2001-0138 | | | 2001-03-12 | privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack. |
CVE-2001-0120 | | | 2001-03-12 | useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack. |
CVE-2001-0119 | | | 2001-03-12 | getty_ps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack. |
CVE-2001-0118 | | | 2001-03-12 | rdist 6.1.5 allows local users to overwrite arbitrary files via a symlink attack. |
CVE-2001-0117 | | | 2001-03-12 | sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack. |
CVE-2001-0116 | | | 2001-03-12 | gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack. |
CVE-2000-1134 | | | 2001-01-09 | Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-docu… |
CVE-2000-1095 | | | 2001-01-09 | modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters. |
CVE-2000-0963 | | | 2000-12-19 | Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS. |
CVE-2000-0844 | | | 2000-11-14 | Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbit… |
CVE-2000-1214 | | | 2000-10-18 | Buffer overflows in the (1) outpack or (2) buf variables of ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating… |
CVE-2000-1213 | | | 2000-10-18 | ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, does not drop privileges after acquiring a raw soc… |
CVE-1999-1111 | | | 1999-11-09 | Vulnerability in StackGuard before 1.21 allows remote attackers to bypass the Random and Terminator Canary security mechanisms by using a non-linear attack whi… |