650
Reference Description
CVE-2001-1555 Terminal privileges are not reset when a user logs out.
https://www.cve.org/CVERecord?id=CVE-2001-1555
CVE-2001-1514 Does not properly pass security context to child processes in certain cases,
allows privilege escalation.
https://www.cve.org/CVERecord?id=CVE-2001-1514
CVE-2001-0128 Does not properly compute roles.
https://www.cve.org/CVERecord?id=CVE-2001-0128
CVE-1999-1193 untrusted user placed in unix "wheel" group
https://www.cve.org/CVERecord?id=CVE-1999-1193
CVE-2005-2741 Product allows users to grant themselves certain rights that can be used to
escalate privileges.
https://www.cve.org/CVERecord?id=CVE-2005-2741
CVE-2005-2496 Product uses group ID of a user instead of the group, causing it to run with
different privileges. This is resultant from some other unknown issue.
https://www.cve.org/CVERecord?id=CVE-2005-2496
CVE-2004-0274 Product mistakenly assigns a particular status to an entity, leading to increased
privileges.
https://www.cve.org/CVERecord?id=CVE-2004-0274
CVE-2007-4217 FTP client program on a certain OS runs with setuid privileges and has a buffer
overflow. Most clients do not need extra privileges, so an overflow is not a
vulnerability for those clients.
https://www.cve.org/CVERecord?id=CVE-2007-4217
CVE-2007-5159 OS incorrectly installs a program with setuid privileges, allowing users to gain
privileges.
https://www.cve.org/CVERecord?id=CVE-2007-5159
CVE-2008-4638 Composite: application running with high privileges (CWE-250) allows user to
specify a restricted file to process, which generates a parsing error that leaks
the contents of the file (CWE-209).
https://www.cve.org/CVERecord?id=CVE-2008-4638
CVE-2007-3931 Installation script installs some programs as setuid when they shouldn't be.
https://www.cve.org/CVERecord?id=CVE-2007-3931
CVE-2002-1981 Roles have access to dangerous procedures (Accessible entities).
https://www.cve.org/CVERecord?id=CVE-2002-1981
CVE-2002-1671 Untrusted object/method gets access to clipboard (Accessible entities).
https://www.cve.org/CVERecord?id=CVE-2002-1671
CVE-2000-0315 Traceroute program allows unprivileged users to modify source address of
packet (Accessible entities).
https://www.cve.org/CVERecord?id=CVE-2000-0315
CVE-2000-0506 User with capability can prevent setuid program from dropping privileges
(Unsafe privileged actions).
https://www.cve.org/CVERecord?id=CVE-2000-0506
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 901 SFP Primary Cluster: Privilege 888 2386
MemberOf 1003 Weaknesses for Simplified Mapping of Published
Vulnerabilities
1003 2576
MemberOf 1200 Weaknesses in the 2019 CWE Top 25 Most Dangerous
Software Errors
1200 2587
CWE Version 4.14
CWE-270: Privilege Context Switching Error
CWE-270: Privilege Context Switching Error