Vulnerabilities (CVE)

Filtered by CWE-269
Total 3848 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-2444 3 Canonical, Debian, Samba 3 Ubuntu Linux, Debian Linux, Samba 2026-06-16 7.2 HIGH N/A
Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user.
CVE-2006-4243 1 Linux-vserver 1 Linux-vserver 2026-06-16 10.0 HIGH 9.8 CRITICAL
linux vserver 2.6 before 2.6.17 suffers from privilege escalation in remount code.
CVE-2004-1349 2 Gnu, Oracle 2 Gzip, Solaris 2026-06-16 2.1 LOW N/A
gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files.
CVE-2003-5001 1 Ibm 1 Iss Blackice Pc Protection 2026-06-16 7.5 HIGH 5.3 MEDIUM
A vulnerability was found in ISS BlackICE PC Protection and classified as critical. Affected by this issue is the component Cross Site Scripting Detection. The manipulation as part of POST/PUT/DELETE/OPTIONS Request leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVE-2002-0367 1 Microsoft 2 Windows 2000, Windows Nt 2026-06-16 7.2 HIGH 7.8 HIGH
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.
CVE-2002-0080 2 Redhat, Samba 2 Linux, Rsync 2026-06-16 2.1 LOW N/A
rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed.
CVE-2002-0049 1 Microsoft 1 Exchange Server 2026-06-16 6.4 MEDIUM N/A
Microsoft Exchange Server 2000 System Attendant gives "Everyone" group privileges to the WinReg key, which could allow remote attackers to read or modify registry keys.
CVE-1999-0084 1 Sun 1 Nfs 2026-06-16 7.2 HIGH 8.4 HIGH
Certain NFS servers allow users to use mknod to gain privileges by creating a writable kmem device and setting the UID to 0.