PT-2013-3105

Name of the Vulnerable Software and Affected Versions Zabbix versions prior to 1.8.16 Zabbix versions 2.x prior to 2.0.5rc1 Description The issue allows remote attackers to override LDAP configuration. This is achieved through the cnf parameter in the user.login function. Recommendations For Zabb...

CVE-2013-1364: Improper Authentication

The user.login function in Zabbix before 1.8.16 and 2.x before 2.0.5rc1 allows remote attackers to override LDAP configuration via the cnf parameter...

Zabbix < 1.8.16 / 2.0.5 / 2.1.0 user.login cnf Parameter Authentication Bypass

According to its self-reported version number, the instance of Zabbix listening on the remote host is a version greater than 1.8.1 prior to 1.8.16, or version 2.0.x prior to 2.0.5. It, therefore, could be affected by an authentication bypass flaw in the 'user.login' method. The issue is triggered...

Microsoft IIS 5.1 多个.CNF文件信息泄露

No description provided by source...

Check for IIS .cnf file leakage

The IIS web server may allow remote users to read sensitive information from .cnf files. This is not the default configuration. Example, http://target/vtipvt%5csvcacl.cnf, access.cnf, svcacl.cnf, writeto.cnf, service.cnf, botinfs.cnf, bots.cnf, linkinfo.cnf and services.cnf OpenVAS Vulnerability...

Microsoft IIS Multiple .cnf File Information Disclosure

The IIS web server may allow a remote user to retrieve its installation path via GET requests to the files 'access.cnf', 'botinfs.cnf', 'bots.cnf' or 'linkinfo.cnf' in the '/vtipvt' directory. This is not the default configuration. %NASLMINLEVEL 70300 This script was written by John Lampe...