CWE-269 Archives - CVE Vulnerability

CVE-2008-4638

Sun, 26 Feb 2023 09:10:39 +0000

qioadmin in the Quick I/O for Database feature in Symantec Veritas File System (VxFS) on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file’s content to standard error in an error message.

The post CVE-2008-4638 appeared first on CVE Vulnerability.

CVE-2008-2931

Sun, 26 Feb 2023 09:09:46 +0000

The do_change_type function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify that the caller has the CAP_SYS_ADMIN capability, which allows local users to gain privileges or cause a denial of service by modifying the properties of a mountpoint.

The post CVE-2008-2931 appeared first on CVE Vulnerability.

CVE-2008-2271

Sun, 26 Feb 2023 09:09:26 +0000

The Site Documentation Drupal module 5.x before 5.x-1.8 and 6.x before 6.x-1.1 allows remote authenticated users to gain privileges of other users by leveraging the “access content” permission to list tables and obtain session IDs from the database.

The post CVE-2008-2271 appeared first on CVE Vulnerability.

CVE-2007-5159

Sun, 26 Feb 2023 09:07:33 +0000

The ntfs-3g package before 1.913-2.fc7 in Fedora 7, and an ntfs-3g package in Ubuntu 7.10/Gutsy, assign incorrect permissions (setuid root) to mount.ntfs-3g, which allows local users with fuse group membership to read from and write to arbitrary block devices, possibly involving a file descriptor leak.

The post CVE-2007-5159 appeared first on CVE Vulnerability.

CVE-2007-4217

Sun, 26 Feb 2023 09:07:07 +0000

Stack-based buffer overflow in the domacro function in ftp in IBM AIX 5.2 and 5.3 allows local users to gain privileges via a long parameter to a macro, as demonstrated by executing a macro via the ‘$’ command.

The post CVE-2007-4217 appeared first on CVE Vulnerability.

CVE-2007-3931

Sun, 26 Feb 2023 09:06:58 +0000

The wrap_setuid_third_party_application function in the installation script for the Samsung SCX-4200 Driver 2.00.95 adds setuid permissions to third party applications such as xsane and xscanimage, which allows local users to gain privileges.

The post CVE-2007-3931 appeared first on CVE Vulnerability.

CVE-2007-2444

Sun, 26 Feb 2023 09:06:18 +0000

Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user.

The post CVE-2007-2444 appeared first on CVE Vulnerability.

CVE-2018-9853

Sun, 26 Feb 2023 06:51:52 +0000

Insecure access control in freeSSHd version 1.3.1 allows attackers to obtain the privileges of the freesshd.exe process by leveraging the ability to login to an unprivileged account on the server.

The post CVE-2018-9853 appeared first on CVE Vulnerability.

CVE-2018-9332

Sun, 26 Feb 2023 06:51:48 +0000

K7Computing Pvt Ltd K7AntiVirus Premium 15.01.00.53 is affected by: Incorrect Access Control. The impact is: gain privileges (local).

The post CVE-2018-9332 appeared first on CVE Vulnerability.

CVE-2018-9333

Sun, 26 Feb 2023 06:51:48 +0000

K7Computing Pvt Ltd K7AntiVirus Premium 15.1.0.53 is affected by: Buffer Overflow. The impact is: execute arbitrary code (local). The component is: K7TSMngr.exe.

The post CVE-2018-9333 appeared first on CVE Vulnerability.