3949 matches found
Design/Logic Flaw
The Security Manager in razorCMS before 0.4 does not verify the permissions of every file owned by the apache user account, which is inconsistent with the documentation and allows local users to have an unspecified impact...
DEBIAN-CVE-2008-6756
ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local users to obtain the database username and password by reading this file...
DEBIAN-CVE-2008-6755
ZoneMinder 1.23.3 on Fedora 10 sets the ownership of /etc/zm.conf to the apache user account, and sets the permissions to 0600, which makes it easier for remote attackers to modify this file by accessing it through a 1 PHP or 2 CGI script...
CVE-2008-6756
ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local users to obtain the database username and password by reading this file...
IBM WebSphere Application Server < 6.0.2.33 Multiple Vulnerabilities
IBM WebSphere Application Server 6.0.2 before Fix Pack 33 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - Provided an attacker has valid credentials, it may be possible to hijack an authenticated session. PK66676 - The PerfServlet code...
[SECURITY] [DSA 1767-1] New multipath-tools packages fix denial of service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-1767-1 [email protected] http://www.debian.org/security/ Nico Golde April 9th, 2009 http://www.debian.org/security/faq -...
IBM WebSphere Application Server 7.0 < Fix Pack 3
IBM WebSphere Application Server 7.0 before Fix Pack 3 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - Under certain conditions it may be possible to access administrative console user sessions. PK74966 - The administrative console is...
[SECURITY] [DSA 1767-1] New multipath-tools packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA-1767-1 [email protected] http://www.debian.org/security/ Nico Golde April 9th, 2009 http://www.debian.org/security/faq -...
Remote access vulnerability using File Thingie v2.5.4
============================================================ !vuln File Thingie v2.5.4 Previous versions may also be affected. ============================================================ ============================================================ !risk Low There are currently just a few website...
CVE-2009-1214
CVE-2009-1214 affects GNU screen 4.0.3, which creates the /tmp/screen-exchange temporary file with world-readable permissions, enabling local users to potentially obtain sensitive session information (confidentiality impact: COMPLETE). The issue is local, due to permissive file mode, and is corro...
nss-ldapd Weak file permissions
/etc/nss-ldapd.conf flie with LDAP password is world readable...
openSUSE 10 Security Update : kpartx (kpartx-6082)
This update improves the file permissions on the socket file. CVE-2009-0115 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update kpartx-6082. The text description of this plugin is C SUSE LLC...
CVE-2009-0874
Multiple unspecified vulnerabilities in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv94, allow local users to cause a denial of service process hang, or possibly bypass file permissions or gain kernel-context privileges, via vectors including ones relat...
CVE-2009-0875
Race condition in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv94, allows local users to cause a denial of service process hang, or possibly bypass file permissions or gain kernel-context privileges, via vectors involving the time at which control is...
Design/Logic Flaw
Multiple unspecified vulnerabilities in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv94, allow local users to cause a denial of service process hang, or possibly bypass file permissions or gain kernel-context privileges, via vectors including ones relat...
Race condition
Race condition in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv94, allows local users to cause a denial of service process hang, or possibly bypass file permissions or gain kernel-context privileges, via vectors involving the time at which control is...
CVE-2009-0874
CVE-2009-0874 concerns multiple unspecified vulnerabilities in the Doors subsystem of the kernel on Solaris 8–10 and OpenSolaris before snv_94. The flaws enable local users to cause a denial of service (process hang) and, potentially, bypass file permissions or gain kernel-context privileges. Doc...
CVE-2009-0875
Race condition in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv94, allows local users to cause a denial of service process hang, or possibly bypass file permissions or gain kernel-context privileges, via vectors involving the time at which control is...
CVE-2009-0875
CVE-2009-0875 describes a race condition in the kernel Doors subsystem affecting Sun Solaris 8–10 and OpenSolaris before snv_94. The vulnerability stems from how control is transferred from a caller to a door server, enabling a local user to cause a process hang (denial of service) and, in some c...
CTM PowerMail 4.2.1 de Carbon <http://www.ctmdev.com>
Title Multiple Vulnerabilities in iAntiVirus Program PC Tools iAntiVirus for Mac OS X http://www.iantivirus.com/ Tested version 1.35, Engine Version 1.0.0.10 tested on german Mac OS X 10.5 with following preferences: - Scan inside archives ON - Scan mode NORMAL - Heuristics NORMAL Description 1. ...