Search and browse vulnerability records from NVD
Showing 11 of 24611 CVEs
Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.
Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user.
Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET.
root privileges via buffer overflow in ordist command on SGI IRIX systems.
IRIX fam service allows an attacker to obtain a list of all files on the server.
IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files.
webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc parameter.
Buffer overflow in xlock program allows local users to execute commands as root.
ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.
Local user gains root privileges via buffer overflow in rdist, via expstr() function.
Certain NFS servers allow users to use mknod to gain privileges by creating a writable kmem device and setting the UID to 0.