Page 6 of 100 results (0.009 seconds)

CVSS: 7.8EPSS: 0%CPEs: 7EXPL: 2

14 Feb 2001 — Multiple buffer overflows in splitvt before 1.6.5 allow local users to execute arbitrary commands. • https://www.exploit-db.com/exploits/260 •

CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0

14 Feb 2001 — htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack. • http://marc.info/?l=bugtraq&m=97916374410647&w=2 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •

CVSS: 5.5EPSS: 0%CPEs: 6EXPL: 0

12 Feb 2001 — dialog before 0.9a-20000118-3bis in Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack. • http://www.debian.org/security/2000/20001225 •

CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 1

09 Jan 2001 — fshd (fsh daemon) in Debian GNU/Linux allows local users to overwrite files of other users via a symlink attack. • http://www.debian.org/security/2000/20001130 •

CVSS: 7.5EPSS: 15%CPEs: 11EXPL: 0

19 Dec 2000 — named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv bug." • http://archives.neohapsis.com/archives/linux/suse/2000-q4/0657.html •

CVSS: 10.0EPSS: 0%CPEs: 74EXPL: 13

14 Nov 2000 — Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen. • https://www.exploit-db.com/exploits/20187 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 0

14 Nov 2000 — Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages. • ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2000-032.0.txt •

CVSS: 10.0EPSS: 34%CPEs: 32EXPL: 5

16 Jul 2000 — rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges. • https://www.exploit-db.com/exploits/20075 •

CVSS: 10.0EPSS: 4%CPEs: 2EXPL: 1

02 Jul 2000 — Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or group name. • https://www.exploit-db.com/exploits/20061 •

CVSS: 7.8EPSS: 0%CPEs: 12EXPL: 0

21 Jun 2000 — Buffer overflow in kon program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via a long -StartupMessage parameter. • http://www.securityfocus.com/bid/1371 •