3871 matches found
Re: [Full-Disclosure] Re: [Full-Disclosure] iDEFENSE Security Advisory 07.01.03: Caché Insecure Installation File and Directory Permissions
Here are more details of my research... Vuln1 Local attackers can exploit this to manipulate directories and binaries inside the installation tree. This may be used by a local malicious user to gain root access. The content in /cachesys/csp/user is executed as root through the web interface. user...
SAP database local root vulnerability during installation. (fwd)
This is an older moot vulnerability that I discovered which was never released, the vendor has fixed it. It is similar to what KF at snosoft discovered recently in the current version of SAPDB. Vapid Labs SAP database local root vulnerability during installation. December 10, 2002 I. BACKGROUND S...
SAP DB development tools privelege escalation
instdbmsrv and instlserver allow chmod/chown for any files...
CVE-2002-0355
netstat in SGI IRIX before 6.5.12 allows local users to determine the existence of files on the system, even if the users do not have the appropriate permissions...
CVE-2002-0824
BSD pppd allows local users to change the permissions of arbitrary files via a symlink attack on a file that is specified as a tty device...
CVE-2002-0760
CVE-2002-0760 describes a race condition in bzip2 prior to 1.0.2 across FreeBSD 4.5 and earlier, and OpenLinux 3.1/3.1.1, where files are decompressed with world-readable permissions before being reset to the permissions specified in the archive, potentially allowing local users to read files dur...
CVE-2001-1059
VMWare creates a temporary file vmware-log.USERNAME with insecure permissions, which allows local users to read or modify license information...
CVE-2002-0760
Race condition in bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, decompresses files with world-readable permissions before setting the permissions to what is specified in the bzip2 archive, which could allow local users to read the...
CVE-2002-0824
CVE-2002-0824 affects BSD pppd, where a symlink attack on a file specified as a tty device allows local users to change permissions of arbitrary files. The description states this is a local privilege/subversion of permissions vulnerability, but the connected documents do not provide additional t...
SRT2003-03-31-1219 - SAP world writable server binaries
Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...
SimpleBBS 1.0.6 - 'users.php' Insecure File Permissions
source: https://www.securityfocus.com/bid/7045/info SimpleBBS reportedly creates sensitive files with world-readable permissions. As a result anyone who has access to SimpleBBS web resources may access confidential information stored in the SimpleBBS user database. This vulnerability was reported...
SimpleBBS 1.0.6 - users.php Insecure File Permissions
SimpleBBS 1.0.6 - users.php Insecure File Permissions source: https://www.securityfocus.com/bid/7045/info SimpleBBS reportedly creates sensitive files with world-readable permissions. As a result anyone who has access to SimpleBBS web resources may access confidential information stored in the...
Oracle 9iAS XSQLServlet soapConfig.xml Authentication Credentials Disclosure
In a default installation of Oracle 9iAS v.1.0.2.2.1, it is possible to access some configuration files. These files include detailed information on how the product was installed on the server including where the SOAP provider and service manager are located as well as administrative URLs to acce...
[BUGZILLA] Security Advisory - remote database password disclosure
Bugzilla Security Advisory January 2nd, 2002 Severity: major remote database password disclosure, bug 186383 minor local file permissions, bug 183188 Summary ======= All Bugzilla installations are advised to upgrade to the latest versions of Bugzilla, 2.14.5 and 2.16.2, both released today...
PT-2002-2435 · Mandrake · Mandrake
Name of the Vulnerable Software and Affected Versions: Mandrake versions 8.2 Description: The Standard security setting for the Mandrake-Security package installs home directories with world-readable permissions. This could allow local users to read other users' files. Recommendations: For Mandra...
[NEWS] Directory Traversal Vulnerabilities in FTP Clients
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion Beyond Security would like to welcome Tiscali World Online to our service provider team. For more info on their service offering IP-Secure,...
WinXP Pro(Gold) Insecure System Restore File Permissions
WinXP ProGold Insecure System Restore File Permissions On the Windows XP ProfessionalGold, the "System Restore" files are not protected properly by NTFS ACL, so every local user can access these important files. System Restore files are stored in the "System Volume Information" directory, and thi...
Interbase 56 - GDS_Lock_MGR UMask File Permission Changing
Interbase 56 - GDSLockMGR UMask File Permission Changing // source: https://www.securityfocus.com/bid/5805/info Interbase is a SQL database distributed and maintained by Borland. It is available for Unix and Linux operating systems. The gdslockmgr program within Interbase is typically installed...
Cacti security issues
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Name: Cacti security issues Original: http://www.knights-of-the-routing-table.org /advisories/krt00120020903cacti.txt - - General info - As quoted from http://www.rrdtool.org: "Cacti's goal is to be a complete frondend to rrdtool, storing all of the...
