Ipswitch IMAIL 11.01 reversible encryption + weak ACL

No description provided by source. |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | |...

[Backports-security-announce] Security Update for dokuwiki

Gerfried Fuchs uploaded new packages for dokuwiki which fixed the following security problems: CVE-2010-0287 It was discovered that an internal variable is not properly sanitized before being used to list directories. This can be exploited to list contents of arbitrary directories. CVE-2010-0288,...

[Backports-security-announce] Security Update for dokuwiki

Gerfried Fuchs uploaded new packages for dokuwiki which fixed the following security problems: CVE-2010-0287 It was discovered that an internal variable is not properly sanitized before being used to list directories. This can be exploited to list contents of arbitrary directories. CVE-2010-0288,...

Ipswitch IMAIL 11.01 - Reversible Encryption + weak ACL

Ipswitch IMAIL 11.01 - Reversible Encryption + weak ACL |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 |...

Ipswitch IMAIL 11.01 - Reversible Encryption + weak ACL

|------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | | |-------------------------------------------------...

Ipswitch IMAIL 11.01 reversible encryption + weak ACL

Exploit for unknown platform in category dos / poc ===================================================== Ipswitch IMAIL 11.01 reversible encryption + weak ACL ===================================================== 0x00 : Vulnerability Information + Product : IMail Server + Version : 11.01 + Vendor...

openSUSE Security Update : acl (acl-1803)

the setfacl tool followed symbolic links in recursive -R mode even if the --physical -P option was specified CVE-2009-4411. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update acl-1803. The text...

SuSE 11 Security Update : acl and libacl (SAT Patch Number 1804)

The setfacl tool followed symbolic links in recursive -R mode even if the --physical -P option was specified CVE-2009-4411. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

CVE-2003-1575

VERITAS File System VxFS 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1 through 9 does not properly implement inheritance of default ACLs in certain circumstances related to the characteristics of a directory inode, which allows local users to bypass intended file permissio...

CVE-2003-1575

The CVE-2003-1575 entry concerns VERITAS File System (VxFS) versions 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1 through 9. The issue is an incorrect inheritance of default ACLs related to directory inode characteristics, which can allow local users to bypass intended fi...

[SECURITY] [DSA-1976-1] New dokuwiki packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1976-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano January 22, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1976-1] New dokuwiki packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1976-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano January 22, 2010 http://www.debian.org/security/faq -...

DSA-1976-1 dokuwiki - several vulnerabilities

Bulletin has no description...

DokuWiki ajax.php cmd[del] Parameter Security Bypass

The remote web server is hosting a version of DokuWiki that is affected by a security bypass vulnerability in the 'cmddel', parameter of the 'lib/plugins/acl/ajax.php' script. An attacker, exploiting this flaw, could modify modify the ACL settings for a specified user or group. Note that this...

Cacls mention the right to command-and-vulnerability warning-the black bar safety net

The Cacls command parameters: cacls.exe c: /e /t /g everyone:F put the c drive set to everyone can browse cacls.exe d: /e /t /g everyone:F The d drive set to everyone can browse cacls.exe e: /e /t /g everyone:F The e drive set to everyone can browse cacls.exe f: /e /t /g everyone:F The f drive is...

net-snmp: Authorization bypass

Background net-snmp bundles software for generating and retrieving SNMP data. Description The netsnmpudpfmtaddr function snmplib/snmpUDPDomain.c, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules. Impact A remote, unauthenticated attacker could bypass the...

[ MDVSA-2009:345 ] acl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:345 http://www.mandriva.com/security/ Package : acl Date : December 28, 2009 Affected: 2009.0, 2009.1, 2010.0, Enterprise Server 5.0 Problem Description: A vulnerability was discovered and corrected in acl:...

Mandriva Linux Security Advisory : acl (MDVSA-2009:345)

A vulnerability was discovered and corrected in acl : The 1 setfacl and 2 getfacl commands in XFS acl 2.2.47, when running in recursive -R mode, follow symbolic links even when the --physical aka -P or -L option is specified, which might allow local users to modify the ACL for arbitrary files or...

CVE-2009-4411

The 1 setfacl and 2 getfacl commands in XFS acl 2.2.47, when running in recursive -R mode, follow symbolic links even when the --physical aka -P or -L option is specified, which might allow local users to modify the ACL for arbitrary files or directories via a symlink attack...

Code injection

The 1 setfacl and 2 getfacl commands in XFS acl 2.2.47, when running in recursive -R mode, follow symbolic links even when the --physical aka -P or -L option is specified, which might allow local users to modify the ACL for arbitrary files or directories via a symlink attack...