Page 4 of 43 results (0.003 seconds)

CVSS: 10.0EPSS: 0%CPEs: 74EXPL: 13

14 Nov 2000 — Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen. • https://www.exploit-db.com/exploits/20187 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 0

14 Nov 2000 — Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages. • ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2000-032.0.txt •

CVSS: 7.5EPSS: 5%CPEs: 3EXPL: 2

14 Nov 2000 — The default configuration of mod_perl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ directory to be browseable, which allows remote attackers to list the contents of that directory. • https://www.exploit-db.com/exploits/20220 •

CVSS: 7.0EPSS: 0%CPEs: 4EXPL: 0

13 Oct 2000 — A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed. • http://archives.neohapsis.com/archives/bugtraq/2000-08/0146.html •

CVSS: 5.5EPSS: 0%CPEs: 18EXPL: 0

18 Jul 2000 — Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system. • http://archives.neohapsis.com/archives/bugtraq/2000-07/0251.html •

CVSS: 7.2EPSS: 0%CPEs: 18EXPL: 0

03 Jul 2000 — makewhatis in Linux man package allows local users to overwrite files via a symlink attack. • ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2000-021.0.txt •

CVSS: 7.8EPSS: 0%CPEs: 12EXPL: 0

21 Jun 2000 — Buffer overflow in kon program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via a long -StartupMessage parameter. • http://www.securityfocus.com/bid/1371 •

CVSS: 7.8EPSS: 0%CPEs: 12EXPL: 1

21 Jun 2000 — Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via an input file containing long CHARSET_REGISTRY or CHARSET_ENCODING settings. • https://www.exploit-db.com/exploits/20024 •

CVSS: 5.5EPSS: 0%CPEs: 15EXPL: 1

21 Apr 2000 — Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack. • https://www.exploit-db.com/exploits/19946 •

CVSS: 5.5EPSS: 0%CPEs: 5EXPL: 0

09 Mar 2000 — Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords. • http://archives.neohapsis.com/archives/bugtraq/2000-03/0082.html •