CVE-2004-0749

The modauthzsvn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadable paths, which could allow remote attackers to gain sensitive information via 1 svn log -v, 2 svn propget, or 3 svn blame, and other commands that follow renames...

CUPS stores user account details in plain text in log file

Overview When an SMB printer is configured, CUPS stores plain text login information to the log file. Description CUPS is a cross-platform printing system for UNIX environments. It can use the IPP, LPD, SMB, and JetDirect protocols to interact with printers. The SMB protocol is used to communicat...

Samba QFILEPATHINFO handling routine contains a remotely exploitable buffer overflow

Overview Samba is vulnerable to a buffer overflow that may allow a remote attacker to execute arbitrary code with root privileges. Description Samba is a widely used open-source implementation of Server Message Block SMB/Common Internet File System CIFS. A lack of bounds checking in the...

[security bulletin] SSRT4794 rev.0 HPStorageWorks Command View XP access restriction bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBST01071 REVISION: 0 SSRT4794 rev.0 HP StorageWorks Command View XP access restriction bypass NOTICE: There are no restrictions for distribution of this Bulletin provided that it remains complete and intact. The information in...

Vignette Application Portal Diagnostic Utility Information Disclosure

The remote host is running Vignette Application Portal, a commercially available portal suite. There is an information disclosure vulnerability in the remote version of this software. An attacker can request the diagnostic utility which will disclose information about the remote site by requestin...

CVE-2004-0148

wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead...

CVE-2004-0148: Undefined Security Weakness

wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead...

CVE-2004-0099: Undefined Security Weakness

mksnapffs in FreeBSD 5.1 and 5.2 only sets the snapshot flag when creating a snapshot for a file system, which causes default values for other flags to be used, possibly disabling security-critical settings and allowing a local user to bypass intended access restrictions...

CVE-2002-1419: Undefined Security Weakness

The upgrade of IRIX on Origin 3000 to 6.5.13 through 6.5.16 changes the MAC address of the system, which could modify intended access restrictions that are based on a MAC address...

[SA12401] Smart Guest Book Database Content Disclosure Security Issue

TITLE: Smart Guest Book Database Content Disclosure Security Issue SECUNIA ADVISORY ID: SA12401 VERIFY ADVISORY: http://secunia.com/advisories/12401/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Smart Guest Book 2.x...

PHP (php-exec-dir) Patch Command Access Restriction Bypass

Exploit for unknown platform in category web applications ========================================================== PHP php-exec-dir Patch Command Access Restriction Bypass ========================================================== 0day.today 2018-03-03...

PHP 4.3.7 - php-exec-dir Patch Command Access Restriction Bypass

PHP 4.3.7 - php-exec-dir Patch Command Access Restriction Bypass milw0rm.com 2004-08-08...

CVE-2004-0709

HP OpenView Select Access 5.0 through 6.0 does not correctly decode UTF-8 encoded unicode characters in a URL, which could allow remote attackers to bypass access restrictions...

CVE-2004-0711

The URL pattern matching feature in BEA WebLogic Server 6.x matches illegal patterns ending in "" as wildcards as if they were the legal "/" pattern, which could cause WebLogic 7.x to allow remote attackers to bypass intended access restrictions because the illegal patterns are properly rejected...

CVE-2004-0709

CVE-2004-0709 affects HP OpenView Select Access 5.0–6.0 and refers to a URL handling flaw where UTF-8 encoded Unicode characters are not decoded correctly, potentially letting an attacker bypass access controls. The provided metrics indicate CVSSv2 base score 7.5 (HIGH) with network access, low a...

CVE-2004-0709: Undefined Security Weakness

HP OpenView Select Access 5.0 through 6.0 does not correctly decode UTF-8 encoded unicode characters in a URL, which could allow remote attackers to bypass access restrictions...

CVE-2004-0711: Undefined Security Weakness

The URL pattern matching feature in BEA WebLogic Server 6.x matches illegal patterns ending in "" as wildcards as if they were the legal "/" pattern, which could cause WebLogic 7.x to allow remote attackers to bypass intended access restrictions because the illegal patterns are properly rejected...

mysql -- GRANT access restriction problem

When a user is granted access to a database with a name containing an underscore and the underscore is not escaped then that user might also be able to access other, similarly named, databases on the affected system. The problem is that the underscore is seen as a wildcard by MySQL and therefore ...

PT-2004-1350 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.8.13 through 0.10.2 Description: The issue is related to multiple buffer overflows that can be triggered by remote attackers, potentially leading to a denial of service or the execution of arbitrary code. This can occur vi...

CVE-2004-0259: Undefined Security Weakness

The checkreferer function in Formmail.php 5.0 and earlier allows remote attackers to bypass access restrictions via an empty or spoofed HTTP Referer, as demonstrated using an application on the same web server that contains a cross-site scripting XSS issue...