4076 matches found
perlshop.cc.txt
Date: Tue, 27 Apr 1999 14:39:47 +0200 From: Bo Elkjaer To: [email protected] Subject: Re: Shopping Carts exposing CC data Been doing some more searches for misconfigured webcarts exposing cc-information. Seems like a pandora's box, that just opened. Perlshop is vulnerable too if misconfigured:...
windows-FAT-recursion.txt
Windows FAT Filesystem Advisory It appears that Windows' FAT file system can be messed up by creating a long enough series of recursive directories. After a certain point is reached, directories cannot be deleted. Because each directory added to the file allocation takes up a certain amount of...
tmp-advisory.txt
L0pht Security Tool and miniAdvisory Advisory released Jan 8 1999 Application: A tool designed to monitor directory activity, copy transient files based upon regular expression matching, syslog upon seeing links created, etc. etc. Severity: Just about every OS out there is replete with programs...
linuxfs.txt
http://www.rootshell.com/ Date: Sun, 5 Jul 1998 10:12:43 +0200 From: Michal Zalewski Subject: Linux kernel filesystem oddities -----BEGIN PGP SIGNED MESSAGE----- Any amount of data, overriding quotas and kernel resource limits, can be stored in root-owned +t directory like /tmp - inside...
webcart.cc.txt
Date: Fri, 23 Apr 1999 23:14:31 +0200 From: Bo Elkjaer To: [email protected] Subject: Re: Shopping Carts exposing CC data This is my first post to Bugtraq so please bear with me for any errs and/or misconducts. I'd just like to point out, that Webcart is vulnerable too. Here goes: Mountain...
kde.kmail.tmp.dir.txt
Date: Wed, 9 Jun 1999 14:52:49 -0700 From: [email protected] Reply-To: X-Force To: [email protected] Subject: ISSalert: ISS Security Advisory: KDE K-Mail File Creation Vulnerability TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact...
netscape.find.txt
Date: Mon, 8 Mar 1999 19:48:05 +0200 From: Georgi Guninski To: [email protected] Subject: Netscape Communicator find vulnerabilities There is a design flaw in Netscape Communicator 4.5 Win95, 4.08 WinNT I guess all 4.x version are vulnerable which allows the following security exploits: Readin...
CVE-1999-0433
XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service...
PT-1999-1116 · Xfree86 · Xfree86
Name of the Vulnerable Software and Affected Versions: XFree86 affected versions not specified Description: The XFree86 startx command is susceptible to a symlink attack, enabling local users to create files in restricted directories. This could potentially allow them to gain privileges or cause ...
[SECURITY] New versions of cfengine fixes symlink attack
The maintainer of Debian GNU/Linux cfengine package found a error in the way cfengine handles temporary files when it runs the tidy action on homedirectories, which makes it suspectible to a symlink attack. The author has been notified of the problem but has not released a fix yet. We recommend y...
PT-1997-1162 · Microsoft · Windows Nt
Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue concerns a Windows NT system's file audit policy, which fails to log events for security-critical files or directories, including both successes and failures. Recommendations: ...
Solaris 7.0 - Coredump File Write
Solaris 7.0 - Coredump File Write source: https://www.securityfocus.com/bid/296/info There is a vulnerability in the way Solaris 2.4 pre Jumbo Kernel Patch -35 for SPARC dumps core files. Under normal operation the operating system writes out a core image of a process when it is terminated due to...
Solaris 7.0 - 'Coredump' File Write
source: https://www.securityfocus.com/bid/296/info There is a vulnerability in the way Solaris 2.4 pre Jumbo Kernel Patch -35 for SPARC dumps core files. Under normal operation the operating system writes out a core image of a process when it is terminated due to the receipt of some signals. The...
CVE-1999-1138
SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories 1 /tmp for the dos user, and 2 /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable...
CVE-2026-48784: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization
More info at https://symfony.com/cve-2026-48784...
