269651
|
- |
|
slackware
|
slackware_linux
|
The default configuration of Slackware 3.4, and possibly other versions, includes . (dot, the current directory) in the PATH environmental variable, which could allow local users to create Trojan hor…
|
NVD-CWE-Other
|
CVE-1999-1422
|
2016-10-18 11:04 |
1999-01-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
269652
|
- |
|
dit
|
transferpro
|
DIT TransferPro installs devices with world-readable and world-writable permissions, which could allow local users to damage disks through the ff device driver.
|
NVD-CWE-Other
|
CVE-1999-1429
|
2016-10-18 11:04 |
1998-01-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
269653
|
- |
|
royal
|
davinci
|
PIM software for Royal daVinci does not properly password-protext access to data stored in the .mdb (Microsoft Access) file, which allows local users to read the data without a password by directly a…
|
NVD-CWE-Other
|
CVE-1999-1430
|
2016-10-18 11:04 |
1999-01-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
269654
|
- |
|
microsoft
|
zero_administration_kit
|
ZAK in Appstation mode allows users to bypass the "Run only allowed apps" policy by starting Explorer from Office 97 applications (such as Word), installing software into the TEMP directory, and chan…
|
NVD-CWE-Other
|
CVE-1999-1431
|
2016-10-18 11:04 |
2005-01-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
269655
|
- |
|
hp
|
jetadmin
|
HP JetAdmin D.01.09 on Solaris allows local users to change the permissions of arbitrary files via a symlink attack on the /tmp/jetadmin.log file.
|
NVD-CWE-Other
|
CVE-1999-1433
|
2016-10-18 11:04 |
1998-07-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
269656
|
- |
|
slackware
|
slackware_linux
|
login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, which prevents it from dropping privileges, causing it to assign root privileges to …
|
NVD-CWE-Other
|
CVE-1999-1434
|
2016-10-18 11:04 |
1998-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
269657
|
- |
|
nec
|
socks_5
|
Buffer overflow in libsocks5 library of Socks 5 (socks5) 1.0r5 allows local users to gain privileges via long environmental variables.
|
NVD-CWE-Other
|
CVE-1999-1435
|
2016-10-18 11:04 |
1998-07-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
269658
|
- |
|
ray_chan
|
www_authorization_gateway
|
Ray Chan WWW Authorization Gateway 0.1 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "user" parameter.
|
NVD-CWE-Other
|
CVE-1999-1436
|
2016-10-18 11:04 |
1998-07-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
269659
|
- |
|
ralf_s._engelschall
|
eperl
|
ePerl 2.2.12 allows remote attackers to read arbitrary files and possibly execute certain commands by specifying a full pathname of the target file as an argument to bar.phtml.
|
NVD-CWE-Other
|
CVE-1999-1437
|
2016-10-18 11:04 |
1998-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
269660
|
- |
|
gcc
|
gcc
|
gcc 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary .i, .s, or .o files.
|
NVD-CWE-Other
|
CVE-1999-1439
|
2016-10-18 11:04 |
1998-01-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|