FreeBSD 4.x NetBSD 1.4.x1.5.x1.6 OpenBSD 3 - pppd Arbitrary File Permission Modification Race Condition

FreeBSD 4.x NetBSD 1.4.x1.5.x1.6 OpenBSD 3 - pppd Arbitrary File Permission Modification Race Condition source: https://www.securityfocus.com/bid/5355/info A vulnerability has been reported in some versions of the pppd daemon included with multiple BSD distributions. A race condition error in the...

FreeBSD 4.x / NetBSD 1.4.x/1.5.x/1.6 / OpenBSD 3 - pppd Arbitrary File Permission Modification Race Condition

source: https://www.securityfocus.com/bid/5355/info A vulnerability has been reported in some versions of the pppd daemon included with multiple BSD distributions. A race condition error in the code may result in the pppd process changing the file permissions on an arbitrary system file. pppd wil...

CVE-2002-0265

Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable permissions, which allows local users to gain privileges by modifying the file...

AlienForm2 CGI script: arbitrary file read/write

===================================================================== Vulnerable: AlienForm2 revision 1.5 Category: Perl/CGI coding errors Impact: Subject to file permissions, an attacker can read any file on the server, append arbitrary data to any existing file or write arbitrary data to new...

Уязвимость утилиты для UPS

Hello 3APA3A! APC American Power Conversion Corp. http://www.apc.com PowerChute plus 5.0.2 for Windows 95/98 Утилита мониторинга источников бесперебойного питания. После установки, без ведома пользователя открывает полный сетевой доступ под именем PWRCHUTE к своему каталогу Program FilesPwrchute...

CVE-2002-0355

netstat in SGI IRIX before 6.5.12 allows local users to determine the existence of files on the system, even if the users do not have the appropriate permissions...

CVE-2002-0295

Alcatel OmniPCX 4400 installs files with world-writable permissions, which allows local users to reconfigure the system and possibly gain privileges...

Weak file permissions in pipermail

Local user can access any private maillist...

Unauthorized remote control access to Funk Proxy

Weak file permissions, decryptable password and unauthorized access to configuration file allow to obtain administrator's password...

CVE-2002-0103

An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by 1 running webcached or 2 obtaining the administrator password from webcache.xml...

CVE-2001-0635

Red Hat Linux 7.1 sets insecure permissions on swap files created during installation, which can allow a local attacker to gain additional privileges by reading sensitive information from the swap file, such as passwords...

CVE-1999-1433

HP JetAdmin D.01.09 on Solaris allows local users to change the permissions of arbitrary files via a symlink attack on the /tmp/jetadmin.log file...

CVE-1999-1188

mysqld in MySQL 3.21 creates log files with world-readable permissions, which allows local users to obtain passwords for users who are added to the user database...

CVE-1999-1144

Certain files in MPower in HP-UX 10.x are installed with insecure permissions, which allows local users to gain privileges...

CVE-1999-1433

HP JetAdmin D.01.09 on Solaris is affected by a local privilege escalation via a symlink attack on /tmp/jetadmin.log, allowing a local user to change file permissions. The root cause is a race/symlink vulnerability in the handling of the log file, enabling arbitrary file permission changes. Publi...

Oracle 9iAS default configuration allows arbitrary users to view sensitive configuration files

Overview It is possible to read the "XSQLConfig.xml" and "soapConfig.xml" configuration files from an Oracle 9i Application Server under the default installation without any authorization. This can lead to an intruder gaining access to sensitive information about the server and potentially...

Oracle 9iAS XSQL Servlet ignores file permissions allowing arbitrary users to view sensitive configuration files

Overview It is possible to read the sensitive configuration files from an Oracle 9i Application Server without any authorization. This can lead to an intruder gaining access to sensitive information about the server and potentially compromising it. Description Default installation of the Oracle 9...

Многочисленные дырки в Alcatel 4400 PBX (multiple bugs)

Пароли по-умолчанию, предсказуемые номера TCP-последовательности, слабые разрешения на файлы и т.д...

Another local root vulnerability during installation of Tarantella Enterprise 3.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Larry W. Cashdollar Vapid Labs 2/18/2002 Another local root vulnerability during installation of Tarantella Enterprise 3. During installation a "twirling / | - " text graphic is displayed you remember them from the shareware games in DOS days.. they...

SCO UnixWare 7.1.X

Well.. Looks like a insecure file vuln exsists within the system created file when you do the initial install of SCO. Lets take a look here at /var/adm/isl/ifile [email protected] ls -l /var/adm/isl/ifile -rw-r--r-- 1 root root 4691 Sep 24 1999 /var/adm/isl/ifile And we all know the shadow file ...