977 matches found
J-Pilot Permissions Vulnerability
J-Pilot automatically creates a ".jpilot" directory in the user's home directory to store preferences and backed up PalmOS device data. The permissions for this directory are mode 755, and files in the directory are mode 644; this allows anyone with only minimal access to the user's home director...
WebServer Pro 2.3.7 Vulnerability
-- WebSite Pro 2.3.7 Vulnerability -- WebSite Pro is a Web Server for Win95/98/NT plataforms. The vulnerability or bad server administration allow any user to create arbitrary files with arbitrary text on the victim machine, from the Internet Web Browser. By a default installation any user can...
CVE-1999-0862
Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file...
CVE-1999-0862
The CVE-1999-0862 case relates to insecure directory permissions in the PostgreSQL RPM distribution, enabling local users to gain privileges by reading a plaintext password file. The PT-Security entry notes PostgreSQL (affected versions not specified) and identifies the root cause as insecure RPM...
CVE-1999-0862
Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file...
PT-1999-1415 · Postgresql · Postgresql
Name of the Vulnerable Software and Affected Versions: PostgreSQL affected versions not specified Description: The issue is related to insecure directory permissions in the RPM distribution for PostgreSQL, allowing local users to gain privileges. This is achieved by reading a plaintext password...
ibm.websphere.txt
On solaris maybe also AIX the installation of WebSphere from IBM installs a deinstallation shell script in /usr/bin with protection 777. This script is also called by 'pkgrm', which has to be issued by root. The script can therefore be easily used for placing a troian horse etc. Besides this...
SunOS 4.1.1 - '/usr/release/bin/winstall' Local Privilege Escalation
source: https://www.securityfocus.com/bid/22/info This applies to sites that have installed Sun Source tapes only. The Sun distribution of sources sunsrc has an installation procedure which creates the directory /usr/release/bin and installs two setuid root files in it: makeinstall and winstall...
CVE-1999-0473
The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the directory being transferred...
ProFTPD mkdir Buffer Overflow
It is possible to crash the remote FTP service by creating a large number of nested directories with names no longer than 255 chars. This issue is known to affect ProFTPD, although other FTP servers may be affected as well. It is likely that a remote attacker can leverage this issue to execute...
ms-iis4-siteserver2.txt
Date: Sat, 30 Jan 1999 13:02:09 -0000 From: mnemonix To: [email protected] Subject: Security Advisory for Internet Information Server 4 with Site Server 2. The following text is in the "iso-8859-1" character set. Your display is set for the "US-ASCII" character set. Some characters may be...
rsync.permissions.txt
Date: Wed, 7 Apr 1999 22:21:30 +1000 From: Andrew Tridgell To: [email protected] Subject: rsync 2.3.1 release - security fix I discovered a security hole in rsync yesterday and have released rsync 2.3.1 to fix it. The new version and patches against the last version are available at...
xfs.txt
Bug in xfs Lukasz Trabinski [email protected] Tue, 30 Mar 1999 00:14:34 +0200 Hello, I hope that's information will be useful for making new patch for XFree86. I found bug in xfs Packet XFree86-xfs-3.3.3.1-1 in RedHat 5.1 and probably in RedHat 5.2 updates, too Xfs is a font server for...
ms.siteserver.3.0.adsamples.txt
Date: Tue, 11 May 1999 16:27:38 -0600 From: Mark To: [email protected] Subject: ALERT Site Server 3.0 May Expose SQL IDs and PSWs ==================================================== Site Server's AdSamples Directory Reveals ID and PSW Discovered by Andrey Kruchkov...
Microsoft Windows NT 4.04.0 SP14.0 SP24.0 SP34.0 SP44.0 SP5 - Help File Buffer Overflow
Microsoft Windows NT 4.04.0 SP14.0 SP24.0 SP34.0 SP44.0 SP5 - Help File Buffer Overflow // source: https://www.securityfocus.com/bid/261/info // // Lax permission in the Windows NT help file folder and a buffer overflow in the Help utility may allow malicious users to gain Administrator privilege...