Vulnerabilities > Low

DATE CVE VULNERABILITY TITLE RISK
2005-05-02 CVE-2005-1039 Local Race Condition vulnerability in GNU Coreutils 5.2.1
Race condition in Core Utilities (coreutils) 5.2.1, when (1) mkdir, (2) mknod, or (3) mkfifo is running with the -m switch, allows local users to modify permissions of other files.
local
high complexity
gnu
3.7
2005-05-02 CVE-2005-1038 crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink.
local
low complexity
paul-vixie redhat
2.1
2005-05-02 CVE-2005-0991 Local Insecure Temporary File Creation vulnerability in IBM AIX RC.BOOT
RC.BOOT in IBM AIX 5.1, 5.2, and 5.3 does not "use a secure location for temporary files," which allows local users to have an unknown impact, probably by overwriting files.
local
low complexity
ibm
2.1
2005-05-02 CVE-2005-0990 Local Insecure Temporary File Creation vulnerability in GNU Sharutils 4.2.1
unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file.
local
low complexity
gnu
2.1
2005-05-02 CVE-2005-0988 Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.
local
high complexity
gnu freebsd gentoo redhat trustix turbolinux ubuntu
3.7
2005-05-02 CVE-2005-0975 Local Integer Overflow vulnerability in Darwin Kernel Mach File Parsing
Integer signedness error in the parse_machfile function in the mach-o loader (mach_loader.c) for the Darwin Kernel as used in Mac OS X 10.3.7, and other versions before 10.3.9, allows local users to cause a denial of service (CPU consumption) via a crafted mach-o header.
local
low complexity
apple opendarwin
2.1
2005-05-02 CVE-2005-0963 Denial-Of-Service vulnerability in Toshiba Acpi Flash Bios 1.6
An error in the Toshiba ACPI BIOS 1.6 causes the BIOS to only examine the first slot in the Master Boot Record (MBR) table for an active partition, which prevents the system from booting even though the MBR is not malformed.
local
low complexity
toshiba
2.1
2005-05-02 CVE-2005-0953 Unspecified vulnerability in Bzip Bzip2
Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by bzip2 after the decompression is complete.
local
high complexity
bzip
3.7
2005-05-02 CVE-2005-0923 Local Denial Of Service vulnerability in Symantec products
The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service (CPU consumption and system crash) by renaming a file on a network share.
local
low complexity
symantec
2.1
2005-05-02 CVE-2005-0916 Local Denial Of Service vulnerability in Linux Kernel 2.6.11
AIO in the Linux kernel 2.6.11 on the PPC64 or IA64 architectures with CONFIG_HUGETLB_PAGE enabled allows local users to cause a denial of service (system panic) via a process that executes the io_queue_init function but exits without running io_queue_release, which causes exit_aio and is_hugepage_only_range to fail.
local
low complexity
linux
2.1