4750 matches found
Super Guestbook superguestconfig Admin Password Disclosure
The remote server is running Super GuestBook, a set of php scripts to manage an interactive guestbook. An attacker may retrieve the file /superguestconfig, which contains the password of the guestbook administrator as well as other configuration details. %NASLMINLEVEL 70300 C Tenable Network...
Disclosing information in Super GuestBook
Product: Super GuestBook Version: 1.0 OffSite: http://www.lasource.r2.ru/ Problem: Disclosing information ----------------------------------------- View file http://target/cgi-bin/SGBDIR/superguestconfig and you view configuration of the Super guestbook. View "Password" field and you view passwor...
AutomatedShops WebC 2.05.0 - Symbolic Link Following Configuration File
AutomatedShops WebC 2.05.0 - Symbolic Link Following Configuration File source: https://www.securityfocus.com/bid/7272/info It has been reported that WebC will execute in the directory of a symbolic link from which it is invoked. Because of this, it may be possible for a local user to load a...
AutomatedShops WebC 2.0/5.0 - Symbolic Link Following Configuration File
source: https://www.securityfocus.com/bid/7272/info It has been reported that WebC will execute in the directory of a symbolic link from which it is invoked. Because of this, it may be possible for a local user to load a configuration file that enabled dangerous variables. $ cd /tmp $ ln -s...
CVE-2002-0889
Buffer overflow in Qpopper popper 4.0.4 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a long bulldir argument in the user's .qpopper-options configuration file...
CVE-2002-0889
CVE-2002-0889 describes a buffer overflow in Qpopper (popper) 4.0.4 and earlier. The flaw allows local users to cause a denial of service and potentially execute arbitrary code via a long bulldir argument in the user’s .qpopper-options configuration file. Affected software is Qpopper up to versio...
CVE-2003-0150
MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf...
3com RAS 1500 Remote vulnerabilities.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Synopsis: 3com RAS 1500 Remote vulnerabilities. Product: 3C433279A-US http://www.3com/ras1500 Version: Firmware X2.0.10 URL: http://isec.pl/vulnerabilities/isec-0009-3com-ras.txt Author: Piotr Chytla [email protected] Date: February 27, 2003 Issue: - ------...
NetGear wireless router unauthorized access
Web interface allows access to configuration file...
Bug in Netgear FM114P Wireless Router firmware
hi, i found out that the netgear FM114P wireless router has a directory-traversal like bug in the web-configuration interface. documents/files can be accessed without authentication by using escaped directory traversal from the accessible /upnp/service directory. this results f.ex. in the ability...
NETGEAR FM114P Wireless Firewall - File Disclosure
NETGEAR FM114P Wireless Firewall - File Disclosure source: https://www.securityfocus.com/bid/6807/info Netgear FM114P Wireless Firewalls allow directory traversal using escaped character sequences. It is possible for an unauthenticated user to retrieve the firewall's configuration file by escapin...
Netgear FM114P Wireless Firewall - File Disclosure
source: https://www.securityfocus.com/bid/6807/info Netgear FM114P Wireless Firewalls allow directory traversal using escaped character sequences. It is possible for an unauthenticated user to retrieve the firewall's configuration file by escaping from the /upnp/service directory...
Cedric Email Reader 0.4 - Global Configuration Script Remote File Inclusion
Cedric Email Reader 0.4 - Global Configuration Script Remote File Inclusion source: https://www.securityfocus.com/bid/6820/info It has been reported that Cedric Email Reader is prone to an issue that may allow remote attackers to include malicious files located on remote servers. This issue is...
Cedric Email Reader 0.2/0.3 - Skin Configuration Script Remote File Inclusion
source: https://www.securityfocus.com/bid/6818/info It has been reported that Cedric Email Reader is prone to an issue that may allow remote attackers to include malicious files located on remote servers. This issue is present in the 'email.php' script. Under some circumstances, it is possible fo...
Cedric Email Reader 0.4 - Global Configuration Script Remote File Inclusion
source: https://www.securityfocus.com/bid/6820/info It has been reported that Cedric Email Reader is prone to an issue that may allow remote attackers to include malicious files located on remote servers. This issue is present in the 'emailreaderexecuteoneachpage.inc.php' script. Under some...
Critical: Red Hat Security Advisory: openldap security update
Updated OpenLDAP packages are available which fix a number of local and remote buffer overflows in libldap as well as the slapd and slurpd daemons. Additionally, potential issues stemming from using user-specified LDAP configuration files have been addressed. Updated 06 Feb 2003 Added fixed...
Longshine Wireless Access Point Devices Information Disclosure Vulnerability
Description The Longshine LCS-883R-AC-B device will allow tftp connections. An attacker can exploit this vulnerability to connect via tftp to the access point and download the configuration file without any authentication. The configuration file contains sensitive information including the...
CVE-2002-1892
NETGEAR FVS318 running firmware 1.1 stores the username and password in a readable format when a backup of the configuration file is made, which allows local users to obtain sensitive information...