CVE Notifier

CVE-1999-1434 CWE-? N/A

CVE-1999-1434

login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, which prevents it from dropping privileges, causing it to assign root privileges to any local user who lo…

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1431 CWE-? N/A

CVE-1999-1431

ZAK in Appstation mode allows users to bypass the "Run only allowed apps" policy by starting Explorer from Office 97 applications (such as Word), installing software into the TEMP directory, and changing the name to that…

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1430 CWE-? N/A

CVE-1999-1430

PIM software for Royal daVinci does not properly password-protext access to data stored in the .mdb (Microsoft Access) file, which allows local users to read the data without a password by directly accessing the files wi…

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1429 CWE-? N/A

CVE-1999-1429

DIT TransferPro installs devices with world-readable and world-writable permissions, which could allow local users to damage disks through the ff device driver.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1428 CWE-? N/A

CVE-1999-1428

Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 allows local users to gain privileges via the save option in the Database Manager, which is running with setgid bin privileges.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1427 CWE-? N/A

CVE-1999-1427

Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 create lock files insecurely, which allows local users to gain root privileges.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1426 CWE-? N/A

CVE-1999-1426

Solaris Solstice AdminSuite (AdminSuite) 2.1 follows symbolic links when updating an NIS database, which allows local users to overwrite arbitrary files.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1425 CWE-? N/A

CVE-1999-1425

Solaris Solstice AdminSuite (AdminSuite) 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges by modifying /etc/passwd.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1424 CWE-? N/A

CVE-1999-1424

Solaris Solstice AdminSuite (AdminSuite) 2.1 uses unsafe permissions when adding new users to the NIS+ password table, which allows local users to gain root access by modifying their password table entries.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1422 CWE-? N/A

CVE-1999-1422

The default configuration of Slackware 3.4, and possibly other versions, includes . (dot, the current directory) in the PATH environmental variable, which could allow local users to create Trojan horse programs that are …

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1421 CWE-? N/A

CVE-1999-1421

NBase switches NH208 and NH215 run a TFTP server which allows remote attackers to send software updates to modify the switch or cause a denial of service (crash) by guessing the target filenames, which have default names…

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1420 CWE-? N/A

CVE-1999-1420

NBase switches NH2012, NH2012R, NH2015, and NH2048 have a back door password that cannot be disabled, which allows remote attackers to modify the switch's configuration.

MITRE n/a:n/a 12 Sep 2001