Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

change uploaded file permissions project change uploaded file permissions vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2022-1788
Due to missing checks the Change Uploaded File Permissions WordPress plugin up to and including 4.0.0 is vulnerable to CSRF attacks. This can be used to change the file and folder permissions of any folder. This could be problematic when specific files like ini files are made rea...
Change Uploaded File Permissions Project Change Uploaded File Permissions
1.2
CVSSv2
CVE-2003-0462
A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service (crash).
Mandrakesoft Mandrake Multi Network Firewall 8.2Linux Linux Kernel 2.4.1Linux Linux Kernel 2.4.10Linux Linux Kernel 2.4.13Linux Linux Kernel 2.4.14Linux Linux Kernel 2.4.20Linux Linux Kernel 2.4.21Linux Linux Kernel 2.4.9Mandrakesoft Mandrake Linux 8.2Linux Linux Kernel 2.4.11Linux Linux Kernel 2.4.12Linux Linux Kernel 2.4.19Linux Linux Kernel 2.4.2Linux Linux Kernel 2.4.7Linux Linux Kernel 2.4.8Linux Linux Kernel 2.4.17Linux Linux Kernel 2.4.18Linux Linux Kernel 2.4.5Linux Linux Kernel 2.4.6Linux Linux Kernel 2.4.0Linux Linux Kernel 2.4.15Linux Linux Kernel 2.4.16
2.1
CVSSv2
CVE-2003-0501
The /proc filesystem in Linux allows local users to obtain sensitive information by opening various entries in /proc/self before executing a setuid program, which causes the program to fail to change the ownership and permissions of those entries.
Linux Linux Kernel 2.6.20.1
2.1
CVSSv2
CVE-2003-0476
The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the calling process, which allows local users to gain read access to restricted file descriptors.
Linux Linux Kernel 2.4.0
3.6
CVSSv2
CVE-2003-0018
Linux kernel 2.4.10 up to and including 2.4.21-pre4 does not properly handle the O_DIRECT feature, which allows local attackers with write privileges to read portions of previously deleted files, or cause file system corruption.
Linux Linux Kernel 2.4.15Linux Linux Kernel 2.4.11Linux Linux Kernel 2.4.12Linux Linux Kernel 2.4.13Linux Linux Kernel 2.4.17Linux Linux Kernel 2.4.10Linux Linux Kernel 2.4.16Linux Linux Kernel 2.4.19Linux Linux Kernel 2.4.14Linux Linux Kernel 2.4.18
2.1
CVSSv2
CVE-2003-0461
/proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, which could allow local users to obtain potentially sensitive information such as the length of passwords.
Redhat Linux 7.1Redhat Linux 7.2Redhat Linux 9.0Redhat Linux 7.3Redhat Linux 8.0
5
CVSSv2
CVE-2003-0550
The STP protocol, as enabled in Linux 2.4.x, does not provide sufficient security by design, which allows malicious users to modify the bridge topology.
Redhat Linux 2.4.2
5
CVSSv2
CVE-2003-0551
The STP protocol implementation in Linux 2.4.x does not properly verify certain lengths, which could allow malicious users to cause a denial of service.
Redhat Linux 2.4.2
5
CVSSv2
CVE-2003-0552
Linux 2.4.x allows remote malicious users to spoof the bridge Forwarding table via forged packets whose source addresses are the same as the target.
Redhat Linux 2.4.2
7.2
CVSSv2
CVE-2003-0961
Integer overflow in the do_brk function for the brk system call in Linux kernel 2.4.22 and previous versions allows local users to gain root privileges.
Linux Linux Kernel
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereferenceCVE-2023-52689CVE-2024-23803client sideCVE-2023-52696information disclosureCVE-2024-35843CVE-2024-27130CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook