Anonymise config files in support zip

Files included in the generated zip file could contain private information. This issue addresses that by removing all sensitive information before creating the zip. The severity of this issue is HIGH. Please see http://confluence.atlassian.com/x/ZILmD for other security related issues and...

Anonymise config files in support zip

Files included in the generated zip file could contain private information. This issue addresses that by removing all sensitive information before creating the zip. The severity of this issue is HIGH. Please see http://confluence.atlassian.com/x/ZILmD for other security related issues and...

System: insecure config file permissions

Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration files, which allows local users to discover passwords by reading these files...

Gentoo Security Advisory GLSA 200310-04 (Apache)

The remote host is missing updates announced in advisory GLSA 200310-04. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 8 : postgresql-8.2.6-1.fc8 (2008-0478)

Mon Jan 7 2008 Tom Lane 8.2.6-1 - Update to PostgreSQL 8.2.6 to fix CVE-2007-4769, CVE-2007-4772, CVE-2007-6067, CVE-2007-6600, CVE-2007-6601 - Make initscript and pam config files be installed unconditionally; seems new buildroots don't necessarily have those directories in place Note that...

Fedora Core 6 : xen-3.0.3-12.fc6 (2007-713)

Fixes a security flaw in pygrub handling of config files and a denial-of-service case in ne2k NIC for QEMU. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as mu...

PT-2007-3754 · Comdev · Comdev One Admin Modules Builder

Name of the Vulnerable Software and Affected Versions: Comdev One Admin Modules Builder modbuild version 4.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter to 1 "config-bak.php" or 2 "config.php" endpoints. However, it's noted...

BTSaveMySql 1.2 (acces to config files)

BTSaveMySql 1.2 acces to config files By : sn0oPy Risk : low Site : http://www.google.fr/search?hl=fr&q=22BT-SaveMySql22&btnG=Rechercher&meta= exploit : dork : intitle:"Extranet: Sauvegarde des Tables" to have all acces to the config and save files. no robots.txt with restriction present + no...

DEBIAN-CVE-2005-3088

fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords...

webcart.cc.txt

Date: Fri, 23 Apr 1999 23:14:31 +0200 From: Bo Elkjaer To: [email protected] Subject: Re: Shopping Carts exposing CC data This is my first post to Bugtraq so please bear with me for any errs and/or misconducts. I'd just like to point out, that Webcart is vulnerable too. Here goes: Mountain...

jdedwards.app.passwd.txt

Date: Mon, 3 May 1999 15:09:11 -0400 From: "Stout, Bill" To: [email protected] Subject: JDEdwards application passwords Anyone have experience with JDEdwards applicationsWorldVision/OneWorld? The user JDE password JDE is written into multiple places in config files, and is typically installed...