cve.bz

CWE-264: Permissions, Privileges, and Access Controls, page 111

Filter

Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

What the weakness is: CWE-264 at MITRE

Ask an AI about CWE-264

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-264: Permissions, Privileges, and Access Controls and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/264.html and https://cve.bz/cve/cwe/264?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. –CVE-2000-0219ExploitEPSS 1.0%

    Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt.

  2. –CVE-1999-0839EPSS 1.6%

    Windows NT Task Scheduler installed with Internet Explorer 5 allows a user to gain privileges by modifying the job after it has been scheduled.

  3. –CVE-1999-0899ExploitEPSS 3.2%

    The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that allow the user to specify an alternate print provider.

  4. –CVE-1999-0777EPSS 12%

    IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.

  5. –CVE-1999-0909EPSS 12%

    Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Pointer" vulnerability.

  6. –CVE-1999-1011ExploitEPSS 77%

    The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.

  7. –CVE-1999-0728EPSS 5.8%

    A Windows NT user can disable the keyboard or mouse by directly calling the IOCTLs which control them.

  8. –CVE-1999-0344EPSS 1.4%

    NT users can gain debug-level access on a system process using the Sechole exploit.

  9. –CVE-1999-0227EPSS 5.0%

    Access violation in LSASS.EXE (LSA/LSARPC) program in Windows NT allows a denial of service.

  10. –CVE-1999-0496EPSS 1.4%

    A Windows NT 4.0 user can gain administrative rights by forcing NtOpenProcessToken to succeed regardless of the user's permissions, aka GetAdmin.

  11. –CVE-1999-1383EPSS 0.4%

    (1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contain shell metacharacters (` back-tick), which can cause the commands enclosed in the directory name to be executed when the shell e…