CVE-2002-0577

HP-UX 11.00 and 11.11 systems are affected by a vulnerability in the passwd(1) utility that may allow a local attacker to corrupt the password file, potentially causing a denial of service. The issue affects the passwd component on HP-UX; HP documents a list of patches to mitigate (PHCO_25527 for...

Abyss Webserver 1.0 Administration password file retrieval exploit

Abyss Web Server was just released April 3rd . The Web Server is vulnerable to retrieving the password file on the host's computer. An attacker can send a request to get the password file just by breaking WWWROOT using Unicode. heres a report i wrote NETCRA$H SECURITY REPORT Abyss Web Server 1.0...

Доступ к паролю в IBM WebSphere (unauthorized access)

JSP-приложения запускаются с привилегиями root что дает доступ к файлу, содержащиму пароль администрирования...

CVE-1999-1405

snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which could allow local users to access the shadowed password file by creating /tmp/ibmsupt/general/passwd before root runs snap...

CVE-1999-1405

CVE-1999-1405 : In AIX prior to 4.3.2, the snap command creates the /tmp/ibmsupt directory with world-readable permissions and does not remove/clear it when snap -a runs. This could allow a local user to access the shadowed password file by pre-creating /tmp/ibmsupt/general/passwd before root exe...

Possible Issue with Netinfo and Mac OS X

Hi, I have been using Mac OS X for quite a while now, and I have just found something that concerns me a little. As you probably know Mac OS X is based on BSD and by default does not have any services running though it is not hard to turn these on thefore is reasonably secure out of the box. Now ...

Большая дырка в ssh (unauthorized access)

Если в файле паролей запись о пароле пользователя состоит из двух символов или менее это часто применяется для слудебных щаписей не относящихся к пользователям то ssh позволяет войти с такой записью без пароля...

Interactive story 1.3 - Directory Traversal

Interactive story 1.3 - Directory Traversal source: https://www.securityfocus.com/bid/3028/info Interactive Story is a web-based application written in Perl and is distributed as freeware. Interactive Story does not filter '../' sequences from user input submitted to a hidden file called 'next'...

DCForum Password File Manipukation Vulnerability (qDefense Advisory Number QDAV-5-2000-2)

DCForum Password File Manipulation Vulnerability qDefense Advisory Number QDAV-5-2000-2 Product: DCForum Vendor: D.C. Script Version Tested: DCForum 2000 1.0 Version 6.0 is believed to be vulnerable as well Severity: Remote; Any attacker may gain DCForum admin privileges, which result in...

OpenServer 5.0.55.0.6 HP-UX 1011 Solaris 2.67.08 - rpc.yppasswdd Buffer Overrun

OpenServer 5.0.55.0.6 HP-UX 1011 Solaris 2.67.08 - rpc.yppasswdd Buffer Overrun source: https://www.securityfocus.com/bid/2763/info The rpc.yppasswdd server is used to handle password change requests from yppasswd and modify the NIS password file. A buffer overrun vulnerability has been discovere...

Ikonboard v2.1.7b "show files" vulnerability

Product: Ikonboard - Version: 2.1.7b - OS: Unix, NT - Vendor: Notified, http://www.ikonboard.com -= Summary =- This is another bug in the Ikonboard. Anyone can read any file on the remote system with the privileges of the web server. -= Problem =- File: help.cgi ---L.44--- $inhelpon = $query -...

web_store-cgi.txt

Exploit: http://example.com/cgi-bin/Webstore/webstore.cgi?page=../../../../. ./../../../etc/passwd%00.html...

Большая дырка в xlock

Перполнение буфера в сегменте данных позволяет получить доступ к данным из файла скрытых паролей...

CIMcheck2.pl

! c:\perl\bin\perl.exe CIMcheck 1.2 - Compaq Insight Manager Exploit Checker By Neon-Lenz ------------------------------------------------------------------ Yea i know this little script is very easy to code and lame, but what the hell. This should do the job. Assuming i'm still learning Perl...

FreeBSD-SA-00:44.xlock

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:44 Security Advisory FreeBSD, Inc. Topic: xlockmore port allows reading of password file Category: ports Module: xlockmore Announced: 2000-08-28 Credits: bind Affects:...

CVE-2000-0572

The Razor configuration management tool uses weak encryption for its password file, which allows local users to gain privileges...

Flowerfire Sawmill 5.0.21 - Weak Password Encryption

// source: https://www.securityfocus.com/bid/1403/info Sawmill is a site statistics package for Unix, Windows and Mac OS. Passwords are encrypted using a weak hash function. This combined with the file disclosure vulnerability in Sawmill bid = 1402 could allow an attacker to read the contents of...

[COVERT-2000-06] Initialized Data Overflow in Xlock

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Network Associates, Inc. COVERT Labs Security Advisory May 29, 2000 Initialized Data Overflow in Xlock COVERT-2000-06 o Synopsis An implementation vulnerability in xlock allows global variables in the initialized data section of memory to be...

CVE-2000-0074

PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissions...

CVE-1999-0554

CVE-1999-0554 concerns NFS exports that may disclose system-critical data to the world. The provided documents consistently describe exposure via NFS shares that can be mounted and read by an attacker, potentially reading (and in some sources possibly writing) sensitive files on the remote host. ...