Asus AAM6000EV unauthorized web access

It's possible to obtain configuration files though web interface...

Mike Bobbitt Album.PL 0.61 - Remote Command Execution

source: https://www.securityfocus.com/bid/7444/info A remote command execution vulnerability has been reported for Album.pl. The vulnerability reportedly exists when alternate configuration files are used. The precise technical details of this vulnerability are currently unknown. This BID will be...

Oracle 9iAS XSQLServlet soapConfig.xml Authentication Credentials Disclosure

In a default installation of Oracle 9iAS v.1.0.2.2.1, it is possible to access some configuration files. These files include detailed information on how the product was installed on the server including where the SOAP provider and service manager are located as well as administrative URLs to acce...

FreeNews & News Evolution (PHP)

Informations : °°°°°°°°°°°°°° Problem : Include files a ------------------- Product : Freenews Version : 2.1 Website : http://www.prologin.fr ---------------------- b ------------------- Product : News Evolution Versions : 1.0, 2.0 Website : http://www.phpevolution.net ---------------------- PHP...

CVE-2002-0569

Oracle 9i Application Server allows remote attackers to bypass access restrictions for configuration files via a direct request to the XSQL Servlet XSQLServlet...

CVE-2002-0568

Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sensitive information including usernames and passwords by requesting 1 XSQLConfig.xml or 2 soapConfig.xml through a virtual directory...

CVE-2001-1258

CVE-2001-1258 affects the Horde IMP before 2.2.6. According to the Debian DSA-073-1 advisory and related sources, a hostile user who can place a publicly readable prefs.lang file on the Apache/PHP server can have that file executed as PHP code, enabling access to config data and potentially the H...

CVE-2001-1258

Horde Internet Messaging Program IMP before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server...

CVE-2001-1258: Undefined Security Weakness

Horde Internet Messaging Program IMP before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server...

CVE-2002-0103

An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by 1 running webcached or 2 obtaining the administrator password from webcache.xml...

Слабые разрешения в PaintBBS (weak permissions)

Конфигурационные файлы открыты на запись и чтение...

Локальные проблемы с UUCP (privilege escalation)

Возможно запустить uucp С конфигурационным файлом указанным пользователем и euid uucp. Кроме того - слабые разрешения на /usr/lib/uucp в некоторых дистрибутивах...

CVE-2002-1595

Cisco SN 5420 Storage Router 1.15 and earlier allows attackers to read configuration files without authorization...

IRM Security Advisory 002: Netware Web Server Source Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- IRM Security Advisory No. 002 Netware Web Server 5.1 Sample Page Source Disclosure Vulnerablity Type / Importance: Information Leakage / High Problem discovered: November 18th 2001...

CVE-2001-0713

Sendmail before 8.12.1 does not properly drop privileges when the -C option is used to load custom configuration files, which allows local users to gain privileges via malformed arguments in the configuration file whose names contain characters with the high bit set, such as 1 macro names that ar...

samba.sh

/bin/sh Samba =2.0.7 xploit for RH 5.1-7.0 by MostaraCaka Snyggast @2001, mail: [email protected] Tested on RH 7.0 with no updates Use it wisely and make the Net more secure Author is not responsible for any illegal usage of this script Knowledge is power, and power is knowledge.../by...

CVE-2001-0713

Sendmail 8.12.0.x is vulnerable to CVE-2001-0713 through improper privilege dropping when the -C option loads custom configuration files. A programming error allows a local attacker to regain dropped privileges by crafting configuration entries with high-bit characters (e.g., one-character macro ...

CVE-2001-0689

Vulnerability in TrendMicro Virus Control System 1.8 allows a remote attacker to view configuration files and change the configuration via a certain CGI program...

Digital Unix 4.0 - MSGCHK MH_PROFILE Symbolic Link

source: https://www.securityfocus.com/bid/3320/info The msgchk utility under certain versions of Digital Unix contains an information disclosure vulnerability which could yield root privilege. Because msgchk fails to check file permissions before opening user configuration files in the user's hom...

Digital Unix 4.0 - MSGCHK MH_PROFILE Symbolic Link

Digital Unix 4.0 - MSGCHK MHPROFILE Symbolic Link source: https://www.securityfocus.com/bid/3320/info The msgchk utility under certain versions of Digital Unix contains an information disclosure vulnerability which could yield root privilege. Because msgchk fails to check file permissions before...