CVE-2002-1419: Undefined Security Weakness

The upgrade of IRIX on Origin 3000 to 6.5.13 through 6.5.16 changes the MAC address of the system, which could modify intended access restrictions that are based on a MAC address...

CVE-2004-0148: Undefined Security Weakness

wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead...

CVE-2004-0099: Undefined Security Weakness

mksnapffs in FreeBSD 5.1 and 5.2 only sets the snapshot flag when creating a snapshot for a file system, which causes default values for other flags to be used, possibly disabling security-critical settings and allowing a local user to bypass intended access restrictions...

[SA12401] Smart Guest Book Database Content Disclosure Security Issue

TITLE: Smart Guest Book Database Content Disclosure Security Issue SECUNIA ADVISORY ID: SA12401 VERIFY ADVISORY: http://secunia.com/advisories/12401/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Smart Guest Book 2.x...

PHP (php-exec-dir) Patch Command Access Restriction Bypass

Exploit for unknown platform in category web applications ========================================================== PHP php-exec-dir Patch Command Access Restriction Bypass ========================================================== 0day.today 2018-03-03...

PHP 4.3.7 - php-exec-dir Patch Command Access Restriction Bypass

PHP 4.3.7 - php-exec-dir Patch Command Access Restriction Bypass milw0rm.com 2004-08-08...

CVE-2004-0709

HP OpenView Select Access 5.0 through 6.0 does not correctly decode UTF-8 encoded unicode characters in a URL, which could allow remote attackers to bypass access restrictions...

CVE-2004-0711

The URL pattern matching feature in BEA WebLogic Server 6.x matches illegal patterns ending in "" as wildcards as if they were the legal "/" pattern, which could cause WebLogic 7.x to allow remote attackers to bypass intended access restrictions because the illegal patterns are properly rejected...

CVE-2004-0709

CVE-2004-0709 affects HP OpenView Select Access 5.0–6.0 and refers to a URL handling flaw where UTF-8 encoded Unicode characters are not decoded correctly, potentially letting an attacker bypass access controls. The provided metrics indicate CVSSv2 base score 7.5 (HIGH) with network access, low a...

CVE-2004-0711: Undefined Security Weakness

The URL pattern matching feature in BEA WebLogic Server 6.x matches illegal patterns ending in "" as wildcards as if they were the legal "/" pattern, which could cause WebLogic 7.x to allow remote attackers to bypass intended access restrictions because the illegal patterns are properly rejected...

CVE-2004-0709: Undefined Security Weakness

HP OpenView Select Access 5.0 through 6.0 does not correctly decode UTF-8 encoded unicode characters in a URL, which could allow remote attackers to bypass access restrictions...

mysql -- GRANT access restriction problem

When a user is granted access to a database with a name containing an underscore and the underscore is not escaped then that user might also be able to access other, similarly named, databases on the affected system. The problem is that the underscore is seen as a wildcard by MySQL and therefore ...

PT-2004-1350 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.8.13 through 0.10.2 Description: The issue is related to multiple buffer overflows that can be triggered by remote attackers, potentially leading to a denial of service or the execution of arbitrary code. This can occur vi...

CVE-2004-0259: Undefined Security Weakness

The checkreferer function in Formmail.php 5.0 and earlier allows remote attackers to bypass access restrictions via an empty or spoofed HTTP Referer, as demonstrated using an application on the same web server that contains a cross-site scripting XSS issue...

WU-FTPD restricted-gid Directory Access Restriction Bypass

The remote host is running wu-ftpd 2.6.2 or older. There is a bug in this version which may allow an attacker to bypass the 'restricted-gid' feature and gain unauthorized access to otherwise restricted directories. Nessus solely relied on the banner of the remote FTP server, so this might be a...

GNU Radius accounting service fails to properly handle exceptional Acct-Status-Type and Acct-Session-Id attributes

Overview The GNU Radius accounting service fails to properly handle packets with exceptional Acct-Status-Type and Acct-Session-Id attributes. Description GNU Radius is a software package used for remote user authentication and accounting. There is a vulnerability in the way the radprintrequest...

CVE-2004-0041: Undefined Security Weakness

The modauthshadow module 1.4 and earlier does not properly enforce the expiration of a user account and password, which could allow remote authenticated users to bypass intended access restrictions...

RPC nibindd Service Detection

This script determines whether or not the nibindd rpc service is running, in which case it connects to it to extract the list of NetInfo domains the remote host is serving. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid11899; scriptversion"$Revision: 1.13 $";...

Microsoft Data Access Components ODBC Buffer Overflow Vulnerability

Description A buffer overflow vulnerability exists in Microsoft Data Access Components that may allow an attacker to run arbitrary code on a client machine. This vulnerability is exposed when a client or a SQL Server implementing the SQL-DMO library, sends a broadcast request for Microsoft SQL...

CVE-2003-0386

OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address...