CVE-2002-0040Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES environment variable, which might allow the us…
2.1 FAIBLE
CVE-2002-0141Maelstrom GPL 3.0.1 allows local users to overwrite arbitrary files of other Maelstrom users via a symlink attack on the /tmp/f file.
1.2 FAIBLE
CVE-2002-0138CDRDAO 1.1.4 and 1.1.5 allows local users to read arbitrary files via the show-data command.
2.1 FAIBLE
CVE-2002-0129efax 0.9 and earlier, when installed setuid root, allows local users to read arbitrary files via the -d option, which prints the contents of the file in a warning message.
2.1 FAIBLE
CVE-2002-0121PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web connections.
2.1 FAIBLE
CVE-2002-0120Apple Palm Desktop 4.0b76 and 4.0b77 creates world-readable backup files and folders when a hotsync is performed, which could allow a local user to obtain sensitive information.
2.1 FAIBLE
CVE-2002-0110Nevrona Designs MiraMail 1.04 and earlier stores authentication information such as POP usernames and passwords in plaintext in a .ini file, which allows an attacker to gain privil…
2.1 FAIBLE
CVE-2002-0087bindsock in Lotus Domino 5.07 on Solaris allows local users to create arbitrary files via a symlink attack on temporary files.
2.1 FAIBLE
CVE-2002-0080rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then re…
2.1 FAIBLE
CVE-2002-0069Memory leak in SNMP in Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service.
2.6 FAIBLE