Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-1999-1363 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:11:02.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows NT 3.51 and 4.0 allow local users to cause a denial of service (crash) by running a program that creates a large number of locks on a file, which exhausts the NonPagedPool. Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/support/kb/articles/q163/1/43.asp - http://www.iss.net/security_center/static/7405.php
CVE ID: CVE-1999-1364 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:03.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows NT 4.0 allows local users to cause a denial of service (crash) via an illegal kernel mode address to the functions (1) GetThreadContext or (2) SetThreadContext. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7421.php - http://support.microsoft.com/support/kb/articles/q142/6/53.asp
CVE ID: CVE-1999-1365 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-01T17:11:02.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows NT searches a user's home directory (%systemroot% by default) before other directories to find critical programs such as NDDEAGNT.EXE, EXPLORER.EXE, USERINIT.EXE or TASKMGR.EXE, which could allow local users to bypass access restrictions or gain privileges by placing a Trojan horse program into the root directory, which is writable by default. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/515 - http://marc.info/?l=ntbugtraq&m=93069418400856&w=2 - http://marc.info/?l=n
ces: - http://www.securityfocus.com/bid/515 - http://marc.info/?l=ntbugtraq&m=93069418400856&w=2 - http://marc.info/?l=ntbugtraq&m=93127894731200&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2336
CVE ID: CVE-1999-1366 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:03.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily decrypt the passwords and read e-mail. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=92714118829880&w=2
CVE ID: CVE-1999-1367 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:03.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.0 does not properly reset the username/password cache for Web sites that do not use standard cache controls, which could allow users on the same system to access restricted web sites that were visited by other users. Additional Analyst Notes: - CVE Program Container: References: - http://www.pcworld.com/news/article/0%2Caid%2C10842%2C00.asp
CVE ID: CVE-1999-1368 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:03.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: AV Option for MS Exchange Server option for InoculateIT 4.53, and possibly other versions, only scans the Inbox folder tree of a Microsoft Exchange server, which could allow viruses to escape detection if a user's rules cause the message to be moved to a different mailbox. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=ntbugtraq&m=92652152723629&w=2 - http://marc.info/?l=ntbugtraq&m=97439568517355&w=2
CVE ID: CVE-1999-1369 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:02.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Real Media RealServer (rmserver) 6.0.3.353 stores a password in plaintext in the world-readable rmserver.cfg file, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=92411181619110&w=2
CVE ID: CVE-1999-1370 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:03.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setup wizard (ie5setup.exe) for Internet Explorer 5.0 disables (1) the screen saver, which could leave the system open to users with physical access if a failure occurs during an unattended installation, and (2) the Task Scheduler Service, which might prevent the scheduled execution of security-critical programs. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=ntbugtraq&m=92220197414799&w=2
CVE ID: CVE-1999-1371 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:02.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the terminal name argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=92100752221493&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7546 - http://www.securiteam.com/exploits/5ZP0O1P35O.html
CVE ID: CVE-1999-1372 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:03.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Triactive Remote Manager with Basic authentication enabled stores the username and password in cleartext in registry keys, which could allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=91966339502073&w=2
CVE ID: CVE-1999-1373 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:03.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: FORE PowerHub before 5.0.1 allows remote attackers to cause a denial of service (hang) via a TCP SYN scan with TCP/IP OS fingerprinting, e.g. via nmap. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=91651770130771&w=2
CVE ID: CVE-1999-1374 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:03.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: perlshop.cgi shopping cart program stores sensitive customer information in directories and files that are under the web root, which allows remote attackers to obtain that information via an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=92523159819402&w=2
CVE ID: CVE-1999-1375 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:03.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: FileSystemObject (FSO) in the showfile.asp Active Server Page (ASP) allows remote attackers to read arbitrary files by specifying the name in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/230 - http://marc.info/?l=ntbugtraq&m=91877455626320&w=2
CVE ID: CVE-1999-1376 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:02.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=91638375309890&w=2 - http://marc.info/?l=ntbugtraq&m=91632724913080&w=2
CVE ID: CVE-1999-1377 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:02.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pulhas.org/phrack/55/P55-07.html
CVE ID: CVE-1999-1378 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:03.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=93250710625956&w=2
CVE ID: CVE-1999-1379 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:11:02.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: DNS allows remote attackers to use DNS name servers as traffic amplifiers via a UDP DNS query with a spoofed source address, which produces more traffic to the victim than was sent by the attacker. Additional Analyst Notes: - CVE Program Container: References: - http://ciac.llnl.gov/ciac/bulletins/j-063.shtml - http://www.iss.net/security_center/static/7238.php - http://marc.info/?l=bugtraq&m=93348057829957&w=2 - ftp://ftp.auscert.org.au/pub/auscert/advisory/AL-1999.004.dns_dos - http://marc.info/?l=bugtraq&m=93433758607623&w=
=2 - ftp://ftp.auscert.org.au/pub/auscert/advisory/AL-1999.004.dns_dos - http://marc.info/?l=bugtraq&m=93433758607623&w=2
CVE ID: CVE-1999-1380 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:11:02.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Norton Utilities 2.0 for Windows 95 marks the TUNEOCX.OCX ActiveX control as safe for scripting, which allows remote attackers to execute arbitrary commands via the run option through malicious web pages that are accessed by browsers such as Internet Explorer 3.0. Additional Analyst Notes: - CVE Program Container: References: - http://mlarchive.ima.com/win95/1997/May/0342.html - http://www.iss.net/security_center/static/7188.php - http://news.zdnet.co.uk/story/0%2C%2Cs2065518%2C00.html - http://www.net-security.sk/bug
curity_center/static/7188.php - http://news.zdnet.co.uk/story/0%2C%2Cs2065518%2C00.html - http://www.net-security.sk/bugs/NT/nu20.html
CVE ID: CVE-1999-1381 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:03.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in dbadmin CGI program 1.0.1 on Linux allows remote attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=90786656409618&w=2
CVE ID: CVE-1999-1382 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:11:03.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allows local users to gain root privileges by creating a setuid program and setting it to "Read Only," which NetWare-NFS changes to a setuid root program. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=88427711321769&w=2 - http://www.iss.net/security_center/static/7246.php - http://support.novell.com/cgi-bin/search/tidfinder.cgi?2940551 - http://marc.info/?l=bugtraq
ty_center/static/7246.php - http://support.novell.com/cgi-bin/search/tidfinder.cgi?2940551 - http://marc.info/?l=bugtraq&m=90295697702474&w=2
CVE ID: CVE-1999-1383 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:03.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contain shell metacharacters (` back-tick), which can cause the commands enclosed in the directory name to be executed when the shell expands filenames using the \w option in the PS1 variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.dataguard.no/bugtraq/1996_3/0503.html - http://marc.info/?l=bugtraq&m=87602167419868&w=2
CVE ID: CVE-1999-1384 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:11:03.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Indigo Magic System Tour in the SGI system tour package (systour) for IRIX 5.x through 6.3 allows local users to gain root privileges via a Trojan horse .exitops program, which is called by the inst command that is executed by the RemoveSystemTour program. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=87602167420095&w=2 - ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-96.08.SGI.systour.vul - http://www.iss.net/security_center/static/7456.php - http://www.securityfocus.com/bid/
visory/AA-96.08.SGI.systour.vul - http://www.iss.net/security_center/static/7456.php - http://www.securityfocus.com/bid/470 - ftp://patches.sgi.com/support/free/security/advisories/19961101-01-I
CVE ID: CVE-1999-1385 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:11:03.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ppp program in FreeBSD 2.1 and earlier allows local users to gain privileges via a long HOME environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/6085 - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-96:20.stack-overflow.asc - http://www.iss.net/security_center/static/7465.php - http://marc.info/?l=bugtraq&m=87602167420332&w=2
CVE ID: CVE-1999-1386 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:11:02.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/rh50-errata-general.html#perl - http://marc.info/?l=bugtraq&m=88932165406213&w=2 - http://www.iss.net/security_center/static/7243.php
CVE ID: CVE-1999-1387 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:03.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows NT 4.0 SP2 allows remote attackers to cause a denial of service (crash), possibly via malformed inputs or packets, such as those generated by a Linux smbmount command that was compiled on the Linux 2.0.29 kernel but executed on Linux 2.0.25. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=87602167420731&w=2 - http://marc.info/?l=bugtraq&m=87602167420732&w=2 - http://marc.info/?l=bugtraq&m=87602167420741&w=2
CVE ID: CVE-1999-1388 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:03.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: passwd in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -F command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.dataguard.no/bugtraq/1994_4/0755.html - http://www2.dataguard.no/bugtraq/1994_2/0197.html - http://www2.dataguard.no/bugtraq/1994_2/0207.html
CVE ID: CVE-1999-1389 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:02.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: US Robotics/3Com Total Control Chassis with Frame Relay between 3.6.22 and 3.7.24 does not properly enforce access filters when the "set host prompt" setting is made for a port, which allows attackers to bypass restrictions by providing the hostname twice at the "host: " prompt. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99 - http://marc.info/?l=bugtraq&m=90221101925916&w=2
CVE ID: CVE-1999-1390 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:03.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: suidexec in suidmanager 0.18 on Debian 2.0 allows local users to gain root privileges by specifying a malicious program on the command line. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94 - http://darwin.bio.uci.edu/~mcoogan/bugtraq/msg00890.html
CVE ID: CVE-1999-1391 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:02.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in NeXT 1.0a and 1.0 with publicly accessible printers allows local users to gain privileges via a combination of the npd program and weak directory permissions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10 - http://www.cert.org/advisories/CA-1990-06.html - http://www.iss.net/security_center/static/7143.php - http://ciac.llnl.gov/ciac/bulletins/b-01.shtml
CVE ID: CVE-1999-1392 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:03.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in restore0.9 installation script in NeXT 1.0a and 1.0 allows local users to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-1990-06.html - http://www.securityfocus.com/bid/9 - http://www.iss.net/security_center/static/7144.php - http://ciac.llnl.gov/ciac/bulletins/b-01.shtml
CVE ID: CVE-1999-1393 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:02.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Control Panel "Password Security" option for Apple Powerbooks allows attackers with physical access to the machine to bypass the security by booting it with an emergency startup disk and using a disk editor to modify the on/off toggle or password in the aaaaaaaAPWD file, which is normally inaccessible. Additional Analyst Notes: - CVE Program Container: References: - http://freaky.staticusers.net/macsec/data/powerbooksecurity-data.html - http://www.securityfocus.com/bid/532
CVE ID: CVE-1999-1394 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:03.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable and append-only flags for files by unmounting the file system and using a file system editor such as fsdb to directly modify the file through a device. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=93094058620450&w=2 - http://www.securityfocus.com/bid/510
CVE ID: CVE-1999-1395 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:03.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in Monitor utility (SYS$SHARE:SPISHR.EXE) in VMS 5.0 through 5.4-2 allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/59332 - http://www.cert.org/advisories/CA-92.16.VMS.Monitor.vulnerability - http://www.iss.net/security_center/static/7136.php - http://www.cert.org/advisories/CA-1992-18.html - http://www.securityfocus.com/bid/51
CVE ID: CVE-1999-1396 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:03.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in integer multiplication emulation code on SPARC architectures for SunOS 4.1 through 4.1.2 allows local users to gain root access or cause a denial of service (crash). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49 - http://www.iss.net/security_center/static/7150.php - http://www.cert.org/advisories/CA-1992-15.html
CVE ID: CVE-1999-1397 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-01T17:11:03.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key, whose permissions allows local and remote users to obtain the physical paths of directories that are being indexed. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7559.php - http://marc.info/?l=bugtraq&m=92242671024118&w=2 - http://marc.info/?l=ntbugtraq&m=92223293409756&w=2 - http://www.securityfocus.com/bid/476
CVE ID: CVE-1999-1398 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:03.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=87602167420921&w=2 - http://www.securityfocus.com/bid/472 - http://www.insecure.org/sploits/irix.xfsdump.html
CVE ID: CVE-1999-1399 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:03.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: spaceball program in SpaceWare 7.3 v1.0 in IRIX 6.2 allows local users to gain root privileges by setting the HOSTNAME environmental variable to contain the commands to be executed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/471 - http://marc.info/?l=bugtraq&m=87602746719552&w=2
CVE ID: CVE-1999-1400 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:03.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Economist screen saver 1999 with the "Password Protected" option enabled allows users with physical access to the machine to bypass the screen saver and read files by running Internet Explorer while the screen is still locked. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/466 - http://archives.indenial.com/hypermail/ntbugtraq/1999/June1999/0007.html - http://marc.info/?l=ntbugtraq&m=92851653600852&w=2 - http://archives.indenial.com/hypermail/ntbugtraq/1999/June1999/0009.h
tp://marc.info/?l=ntbugtraq&m=92851653600852&w=2 - http://archives.indenial.com/hypermail/ntbugtraq/1999/June1999/0009.html
CVE ID: CVE-1999-1401 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:03.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files (iconbook and searchbook). Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7575.php - http://www.securityfocus.com/bid/463 - http://www.osvdb.org/8563 - ftp://patches.sgi.com/support/free/security/advisories/19961201-01-PX
CVE ID: CVE-1999-1402 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:11:03.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to connect to the socket and possibly disrupt or control the operations of the program using that socket. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7172.php - http://www.securityfocus.com/bid/456 - http://marc.info/?l=bugtraq&m=87602248718482&w=2 - http://marc.info/?l=bugtraq&m=87602167418317&w=2
CVE ID: CVE-1999-1403 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:03.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM/Tivoli OPC Tracker Agent version 2 release 1 creates files, directories, and IPC message queues with insecure permissions (world-readable and world-writable), which could allow local users to disrupt operations and possibly gain privileges by modifying or deleting files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/10771 - http://www.securityfocus.com/bid/382