Design/Logic Flaw

Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore points images are configured, uses weak permissions world readable for a configuration file with network share credentials, which allows local users to...

CVE-2007-2361

Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore points images are configured, uses weak permissions world readable for a configuration file with network share credentials, which allows local users to...

CVE-2007-2361

Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore points images are configured, uses weak permissions world readable for a configuration file with network share credentials, which allows local users to...

Symantec Norton Ghost本地溢出及信息泄露漏洞

Symantec Norton Ghost是一个备份恢复系统，允许用户将系统恢复到之前的快照状态。 Norton Ghost的服务管理器实现上存在缓冲区溢出漏洞，如果攻击者能够向Norton Ghost的服务管理器中的函数提供超长字符串的话，就可能触发缓冲区溢出，导致以系统级权限执行任意指令。 Norton...

JChit counter 1.0.0 (imgsrv.php ac) Remote File Disclosure Vulnerability

No description provided by source. Y! Underground Group http://2600.ir -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=- Portal.......: jchit counter v1.0.0 Download.....: http://developers.jccorp.net Type.........: Remot...

BMC Performance Manager PatrolAgent.EXE内存破坏漏洞

BMC Performance Manager是一款端到端系统管理解决方案。 BMC Performance Manager存在设计错误，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 PatrolAgent.exe监听TCP 3181端口，服务允许远程攻击者修改配置文件而不需要任何验证。攻击者修改在SNMP公共定义中的参数，如masterAgentName和masterAgentStartLine可导致任意代码执行。 BMC Software Performance Manager 目前没有解决方案提供： http://www.bmc.com/...

CVE-2007-1009

Macrovision InstallAnywhere Enterprise before 8.0.1 uses the InstallScript.iapxml configuration file without integrity protection to verify authorization for installing an application, which allows local users to perform unauthorized installations by removing the 1 password or 2 serial number...

Authorization

Macrovision InstallAnywhere Enterprise before 8.0.1 uses the InstallScript.iapxml configuration file without integrity protection to verify authorization for installing an application, which allows local users to perform unauthorized installations by removing the 1 password or 2 serial number...

Macrovision InstallAnywhere绕过口令和序列号认证漏洞

InstallAnywhere是领先的多平台安装解决方案，提供完整的安装工具套件，以生成功能全面、灵活的安装程序。 InstallAnywhere在处理软件安装时存在竞争条件漏洞，本地攻击者可能利用此漏洞获取应用的非授权访问。...

CVE-2007-2001

Multiple direct static code injection vulnerabilities in admin/configurer2.php in Crea-Book 1.0 and earlier allow remote authenticated administrators to execute arbitrary PHP code via the "Fond de la page" background color field and other unspecified fields, which injects into config.inc.php3...

PT-2007-3332 · Phpecho · Phpecho Cms

Name of the Vulnerable Software and Affected Versions: PHPEcho CMS version 2.0 Description: The issue allows remote attackers to potentially execute arbitrary PHP code. This is achieved via a URL in the plugin file parameter to "smarty/internals/core.load pulgins.php" or the root path parameter t...

Heap overflow

Multiple buffer overflows in src/ezstream.c in Ezstream before 0.3.0 allow remote attackers to execute arbitrary code via a crafted XML configuration file processed by the 1 urlParse function, which causes a stack-based overflow and the 2 ReplaceString function, which causes a heap-based overflow...

CVE-2007-1344

Multiple buffer overflows in src/ezstream.c in Ezstream before 0.3.0 allow remote attackers to execute arbitrary code via a crafted XML configuration file processed by the 1 urlParse function, which causes a stack-based overflow and the 2 ReplaceString function, which causes a heap-based overflow...

Zend Platform 2.2.1 - 'PHP.INI' File Modification

source: https://www.securityfocus.com/bid/22802/info The Zend Platform is prone to an issue that may let local attackers modify the PHP configuration file 'php.ini'. This issue occurs because the application is installed with an 'inimodifier' program that may be executed by local users and will...

MDKA-2006:041 : smbldap-tools

This update fixes a problem with the smbldap-tools package shipped with Mandriva Linux 2006 where it would issue warnings if the smb.conf configuration file had continuation lines using the '' character. The updated packages correct this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has be...

MDKA-2005:047 : apcupsd

The apcupsd package as shipped with Mandriva Linux 2006 was missing the main apcupsd configuration file. As a result, those upgrading from earlier versions would have their existing configuration file moved to /etc/apcupsd/apcupsd.conf.rpmsave with no new configuration file to replace it, which...

NoMachine NX Server privilege escalation

nxconfigure.sh doesn't check invoking user, allowing configuration file modification...

CVE-2007-0367

Rumpus 5.1 and earlier has weak permissions for certain files and directories under /usr/local/Rumpus, including the configuration file, which allows local users to have an unknown impact by creating, modifying, or deleting files...

CVE-2007-0367

Rumpus 5.1 and earlier has weak permissions for certain files and directories under /usr/local/Rumpus, including the configuration file, which allows local users to have an unknown impact by creating, modifying, or deleting files...

CVE-2007-0367

The CVE-2007-0367 entry concerns Rumpus 5.1 and earlier, where weak permissions for files/directories under /usr/local/Rumpus (including the configuration file) allow local users to create, modify, or delete files, with an unknown impact. The available sources (NVD entry and related records) conf...