|
317371
|
5.5 |
MEDIUM
Local
|
mandrakesoft
|
mandrake_linux
|
The Standard security setting for Mandrake-Security package (msec) in Mandrake 8.2 installs home directories with world-readable permissions, which could allow local users to read other user's files.
|
CWE-276
Incorrect Default Permissions
|
CVE-2002-1713
|
2024-02-9 00:50 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
317372
|
7.8 |
HIGH
Local
|
microsoft
|
windows_media_player
|
Microsoft Windows Media Player (WMP) 6.3, when installed on Solaris, installs executables with world-writable permissions, which allows local users to delete or modify the executables to gain privile…
|
CWE-276
Incorrect Default Permissions
|
CVE-2002-1844
|
2024-02-9 00:50 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
317373
|
9.8 |
CRITICAL
Network
|
suse
|
suse_linux
|
The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing.
|
CWE-276
Incorrect Default Permissions
|
CVE-1999-0426
|
2024-02-9 00:50 |
1999-03-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
317374
|
7.8 |
HIGH
Local
|
isc
|
bind
|
dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-MD5 shared secret key file used for DNS Transactional Signatures (TSIG), which al…
|
CWE-276
Incorrect Default Permissions
|
CVE-2001-0497
|
2024-02-9 00:49 |
2001-07-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
317375
|
7.5 |
HIGH
Network
|
aol
|
aim
|
The GIF parser in ateimg32.dll in AOL Instant Messenger (AIM) 5.9.3797 and earlier allows remote attackers to cause a denial of service (crash) via a malformed buddy icon that causes an integer under…
|
CWE-191
Integer Underflow (Wrap or Wraparound)
|
CVE-2005-1891
|
2024-02-9 00:44 |
2005-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
317376
|
9.8 |
CRITICAL
Network
|
barton
|
ngircd
|
Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a…
|
CWE-191
Integer Underflow (Wrap or Wraparound)
|
CVE-2005-0199
|
2024-02-9 00:43 |
2005-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
317377
|
7.5 |
HIGH
Network
|
samba
canonical
|
ppp
ubuntu_linux
|
Integer underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of service (daemon crash) via a CBCP packet with an invalid length value that causes pppd to access an inco…
|
CWE-191
Integer Underflow (Wrap or Wraparound)
|
CVE-2004-1002
|
2024-02-9 00:43 |
2005-03-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
317378
|
7.5 |
HIGH
Network
|
linux
|
linux_kernel
|
Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a denial of service (application crash) via a malformed IP packet.
|
CWE-191
Integer Underflow (Wrap or Wraparound)
|
CVE-2004-0816
|
2024-02-9 00:28 |
2004-12-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
317379
|
9.8 |
CRITICAL
Network
|
symantec
|
liveupdate
|
Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com…
|
CWE-494
Download of Code Without Integrity Check
|
CVE-2001-1125
|
2024-02-8 11:28 |
2001-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
317380
|
9.8 |
CRITICAL
Network
|
phpgedview
|
phpgedview
|
PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php for PHPGEDVIEW 2.61 allows remote attackers to execute arbitrary PHP code by modi…
|
CWE-829
Inclusion of Functionality from Untrusted Control Sphere
|
CVE-2004-0030
|
2024-02-8 11:27 |
2004-01-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
