643
Reference Description
CVE-2004-2204 Gain privileges using functions/tags that should be restricted (Accessible
entities).
https://www.cve.org/CVERecord?id=CVE-2004-2204
CVE-2000-0315 Traceroute program allows unprivileged users to modify source address of
packet (Accessible entities).
https://www.cve.org/CVERecord?id=CVE-2000-0315
CVE-2004-0380 Bypass domain restrictions using a particular file that references unsafe URI
schemes (Accessible entities).
https://www.cve.org/CVERecord?id=CVE-2004-0380
CVE-2002-1154 Script does not restrict access to an update command, leading to resultant disk
consumption and filled error logs (Accessible entities).
https://www.cve.org/CVERecord?id=CVE-2002-1154
CVE-2002-1145 "public" database user can use stored procedure to modify data controlled by
the database owner (Unsafe privileged actions).
https://www.cve.org/CVERecord?id=CVE-2002-1145
CVE-2000-0506 User with capability can prevent setuid program from dropping privileges
(Unsafe privileged actions).
https://www.cve.org/CVERecord?id=CVE-2000-0506
CVE-2002-2042 Allows attachment to and modification of privileged processes (Unsafe
privileged actions).
https://www.cve.org/CVERecord?id=CVE-2002-2042
CVE-2000-1212 User with privilege can edit raw underlying object using unprotected method
(Unsafe privileged actions).
https://www.cve.org/CVERecord?id=CVE-2000-1212
CVE-2005-1742 Inappropriate actions allowed by a particular role(Unsafe privileged actions).
https://www.cve.org/CVERecord?id=CVE-2005-1742
CVE-2001-1480 Untrusted entity allowed to access the system clipboard (Unsafe privileged
actions).
https://www.cve.org/CVERecord?id=CVE-2001-1480
CVE-2001-1551 Extra Linux capability allows bypass of system-specified restriction (Unsafe
privileged actions).
https://www.cve.org/CVERecord?id=CVE-2001-1551
CVE-2001-1166 User with debugging rights can read entire process (Unsafe privileged actions).
https://www.cve.org/CVERecord?id=CVE-2001-1166
CVE-2005-1816 Non-root admins can add themselves or others to the root admin group
(Unsafe privileged actions).
https://www.cve.org/CVERecord?id=CVE-2005-1816
CVE-2005-2173 Users can change certain properties of objects to perform otherwise
unauthorized actions (Unsafe privileged actions).
https://www.cve.org/CVERecord?id=CVE-2005-2173
CVE-2005-2027 Certain debugging commands not restricted to just the administrator, allowing
registry modification and infoleak (Unsafe privileged actions).
https://www.cve.org/CVERecord?id=CVE-2005-2027
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 884 CWE Cross-section 884 2567
MemberOf 901 SFP Primary Cluster: Privilege 888 2386
MemberOf 1396 Comprehensive Categorization: Access Control 1400 2519
CWE Version 4.14
CWE-268: Privilege Chaining
CWE-268: Privilege Chaining