4308 matches found
CVE-2003-0388
CVE-2003-0388 concerns the pam_wheel module in Linux-PAM where, if the trust option is enabled and use_uid is disabled, local users can spoof getlogin() results and potentially gain privileges. The issue affects Linux-PAM versions up to 0.77 (notably around the pam_wheel and pam_lastlog handling ...
CVE-2003-0388: Undefined Security Weakness
pamwheel in Linux-PAM 0.78, with the trust option enabled and the useuid option disabled, allows local users to spoof log entries and gain privileges by causing getlogin to return a spoofed user name...
CVE-2002-1410
Easy Guestbook CGI programs do not authenticate the administrator, which allows remote attackers to 1 delete entries via direct access of admin.cgi, or 2 reconfigure Guestbook via direct access of config.cgi...
EUVD-2002-1393
Easy Guestbook CGI programs do not authenticate the administrator, which allows remote attackers to 1 delete entries via direct access of admin.cgi, or 2 reconfigure Guestbook via direct access of config.cgi...
SSGBook 1.0 - Image Tag HTML Injection
source: https://www.securityfocus.com/bid/5915/info SSGbook includes codes for allowing users to specify HTML formatting and layout inside of guestbook entries. For example, a user can include an image by including it inside of image or img tags. However, arbitrary HTML and script code are not...
Ben Chivers Easy Guestbook 1.0 - Administrative Access
Ben Chivers Easy Guestbook 1.0 - Administrative Access source: https://www.securityfocus.com/bid/5341/info The vulnerability has been reported for Easy Guestbook 1.0. It is possible for an atttacker to modify any user's guestbook by deleting entries. The vulnerability is the result of Guestbook...
Easy Guestbook Vulnerabilities
AresU Advisory 19/July/2002 Easy Guestbook Vulnerabilities Severity : High Possible to edit member homepage Systems Affected: Easy Guestbook v1.0 Vendor URL : http://www.easyscripts.co.uk Vuln Type : It does not use Access Validation to delete the entries and login as Admin Control. Author : Ares...
CVS (Web-Based) Entries File Information Disclosure
The remote web server allows access to a 'CVS/Entries' file and thereby exposes file names in the associated repository. %NASLMINLEVEL 70300 This script was written by Nate Haggard SecurityMetrics inc. See the Nessus Scripts License for details Changes by Tenable: - pattern matching to determine ...
Arp spoofing в CISCO
ARP-пакет позволяет переписать arp-запись...
Большая дырка в ssh (unauthorized access)
Если в файле паролей запись о пароле пользователя состоит из двух символов или менее это часто применяется для слудебных щаписей не относящихся к пользователям то ssh позволяет войти с такой записью без пароля...
CVE-2024-2056
creationtimestamp| type| source ---|---|--- 2000-12-31 23:00:00+00:00| seen| http://takeonme.org/cve/ 2024-03-05 21:26:38+00:00| seen| https://t.me/ctinow/200709 2024-03-05 21:26:51+00:00| seen| https://t.me/ctinow/200718...
CVE-2000-1007: Undefined Security Weakness
I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allows an attacker to cause reporting errors...
vixie-cron - Local Privilege Escalation
vixie-cron - Local Privilege Escalation !/bin/sh echo '.-------------------------------------------------------------------------.' echo '| Marchew Hyperreal Industries ................... |' echo "| ...well, it is just me, but it is more elite to speak as a group... |" echo...
Небольшая дырка в I-Gear
Слишком длинные записи в log-Файлах приводят к невозможности просмотреть журнал...
CVE-2000-0076
nviboot boot script in the Debian nvi package allows local users to delete files via malformed entries in vi.recover...
newsbug.txt
------=NextPart000015301BF7FF9.87FC33E0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I created my NewsBug approximately 2-3 months ago but never did = anything further with it as I have a lot of other projects I am working = on. I reported this to MS ...
CVE-1999-0461: Undefined Security Weakness
Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address...
CVE-1999-0764
NetBSD allows ARP packets to overwrite static ARP entries...
CVE-1999-0764
NetBSD ARP handling allows ARP packets to overwrite static ARP entries. This can affect ownership of IP-to-MAC mappings, with partial integrity and availability impact as per NVD metrics. The exact affected NetBSD versions, vulnerable code path, exploit details, and official remediation are not p...