Vulnerabilidades

makewhatis in the man package before 1.5i2 allows an attacker in group man to overwrite arbitrary files via a man page whose name contains shell metacharacters.

pmake before 2.1.35 in Turbolinux 6.05 and earlier is installed with setuid root privileges, which could allow local users to gain privileges by exploiting vulnerabilities in pmake or programs that are used by pmake.

FileMaker Pro 5 Web Companion allows remote attackers to bypass Field-Level database security restrictions via the XML publishing or email capabilities.

FileMaker Pro 5 Web Companion allows remote attackers to send anonymous or forged email.

Meeting Maker uses weak encryption (a polyalphabetic substitution cipher) for passwords, which allows remote attackers to sniff and decrypt passwords for Meeting Maker accounts.

The shopping cart application provided with Filemaker allows remote users to modify sensitive purchase information via hidden form fields.

The Make-a-Store OrderPage shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.

GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands.

wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file.

Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string.

Multiple buffer overflows in WindowMaker 0.52 through 0.60.0 allow attackers to cause a denial of service and possibly execute arbitrary commands by executing WindowMaker with a long program name (argv[0]).

fm_fls license server for Adobe Framemaker allows local users to overwrite arbitrary files and gain root access.