4750 matches found
Centrinity FirstClass Desktop Client 7.1 - Local Buffer Overflow
// source: https://www.securityfocus.com/bid/10074/info It has been reported that FirstClass Desktop Client may be prone to a local buffer overflow vulnerability that could allow attackers to execute arbitrary code on a vulnerable system that may lead to elevated privileges. The issue is reported...
Apache mod_alias vulnerable to buffer overflow via crafted regular expression
Overview A vulnerability in a supplementary module to the Apache HTTP server could allow an attacker to execute arbitrary code on an affected web server under certain circumstances. Description The Apache HTTP server distribution includes a number of supplemental modules that provide additional...
Lotus Notes Domino 6.0.2 (linux) faulty default permissions
Lotus Notes Domino 6.0.2 linux for the installation it is recommended to add a new user like "notes". after this you should log in as root install the services. well, after i have done this i have noticed the following. there are faulty default permissions for the important configuration file...
CVE-2004-0029
Lotus Notes Domino 6.0.2 on Linux installs the notes.ini configuration file with world-writable permissions, which allows local users to modify the Notes configuration and gain privileges...
CVE-2003-1456
Album.pl 6.1 allows remote attackers to execute arbitrary commands, when an alternative configuration file is used, via unknown attack vectors...
PHP-Coolfile version 1.4 unauthorized access
/ --------------------------------- RusH security team advisory --------------------------------- www.rsteam.ru http://rst.void.ru / // Product: PHP-Coolfile Version: 1.4 Vuln: unauthorized access OffSite: http://dcom.bip.ru/coolfile/ // Date: 11/11/2003 Author: 1dt.w0lf // RsT // Problem: ======...
SuSE Linux Professional 8.2 - SuSEWM Configuration File Insecure Temporary File
// source: https://www.securityfocus.com/bid/8778/info A problem exists in the SuSEWM configuration file used by SuSEConfig. Because of this, it may be possible for a local attacker to gain elevated privileges. / Proof of Concept for SuSEconfig.vmware Symbolic Link. Tested on SuSE 8.2. Nash Leon ...
SuSE Linux Professional 8.2 - SuSEWM Configuration File Insecure Temporary File
SuSE Linux Professional 8.2 - SuSEWM Configuration File Insecure Temporary File // source: https://www.securityfocus.com/bid/8778/info A problem exists in the SuSEWM configuration file used by SuSEConfig. Because of this, it may be possible for a local attacker to gain elevated privileges. / Proo...
Apache Httpd < 2.0.48 : Local configuration regular expression overflow
By using a regular expression with more than 9 captures a buffer overflow can occur in modalias or modrewrite. To exploit this an attacker would need to be able to create a carefully crafted configuration file .htaccess or httpd.conf...
Apache Httpd < 1.3.29 : Local configuration regular expression overflow
By using a regular expression with more than 9 captures a buffer overflow can occur in modalias or modrewrite. To exploit this an attacker would need to be able to create a carefully crafted configuration file .htaccess or httpd.conf...
Important: Red Hat Security Advisory: : : : New PHP packages fix vulnerabilities
Updated PHP packages are available for Red Hat Linux on IBM iSeries and pSeries systems. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP server. The mail function in PHP 4.x to 4.2.2 may allow local script authors to bypass safe mode restrictions and modify command...
DSA-335 mantis - incorrect permissions
Bulletin has no description...
Portmon file arbitrary read/write access vulnerability
Package: Portmon Auth: http://www.aboleo.net/ Versions: 1.7 prior ? Vulnerability: File arbitrary read/write access vulnerability Portmon is a network service monitoring daemon http://www.aboleo.net/software/portmon/. "In order to use ping support, Portmon must run as root or be installed setuid...
Low: Red Hat Security Advisory: lv security update
Updated lv packages that fix the possibility of local privilege escalation are now available. Lv is a powerful file viewer similar to less. It can decode and encode multilingual streams through many coding systems, such as ISO-8859, ISO-2022, EUC, SJIS Big5, HZ, and Unicode. A bug has been found ...
Apple QuickTimeDarwin Streaming MP3Broadcaster - ID3 Tag Handling
Apple QuickTimeDarwin Streaming MP3Broadcaster - ID3 Tag Handling source: https://www.securityfocus.com/bid/7660/info MP3Broadcaster is shipped as part of Darwin Streaming Server software. MP3Broadcaster has been reported prone to a vulnerability when processing malicious ID3 tags. This is likely...
quotacheck security fix in rc.M
An upgraded sysvinit package is available which fixes a problem with the use of quotacheck in /etc/rc.d/rc.M. The original version of rc.M calls quotacheck like this: echo "Checking filesystem quotas: /sbin/quotacheck -avugM" /sbin/quotacheck -avugM The 'M' option is wrong. This causes the...
[SECURITY] [DSA-304-1] New lv packages fix local privilege escalation
-------------------------------------------------------------------------- Debian Security Advisory DSA 304-1 [email protected] http://www.debian.org/security/ Matt Zimmerman May 15th, 2003 http://www.debian.org/security/faq -...
DSA-304 lv - privilege escalation
Bulletin has no description...
Mike Bobbitt Album.PL 0.61 - Remote Command Execution
Mike Bobbitt Album.PL 0.61 - Remote Command Execution source: https://www.securityfocus.com/bid/7444/info A remote command execution vulnerability has been reported for Album.pl. The vulnerability reportedly exists when alternate configuration files are used. The precise technical details of this...
EZ Publish 2.2.73.0 - site.ini Information Disclosure
EZ Publish 2.2.73.0 - site.ini Information Disclosure source: https://www.securityfocus.com/bid/7347/info eZ Publish has been reported prone to sensitive information disclosure vulnerability. An attacker may make a request for and download the underlying site.ini configuration file. The file...