3871 matches found
Two Problems in IMP 2
Crimelabs, Inc. www.crimelabs.com Security Advisory Crimelabs Security Advisory CLABS200003 Title: IMP/MSWordView /tmp Problems Date: 22 April, 2000 Application: IMP with MSWordView Platform: Any supported by IMP, MSWordView Severity: Moderate -- anyone can view Word document attachments processe...
AT Computing atsar_linux 1.4 - File Manipulation
source: https://www.securityfocus.com/bid/1048/info atsar is a linux load monitoring software package released under the GPL by AT Computing. atsadc is a setuid root binary that is included in the atsar package. atsadc is setuid because it obtains informatin via /dev/kmem. atsadc will accept as a...
redhat-printtool.txt
Hackerslab bugpaper Linux printtool get printer password File : /usr/bin/printtool SYSTEM : Linux INFO : If make printer configuration by printtool package, It make vule config file. Config file perrmission is "-rw-r--r-- root root". If use samba network printer, password stored in config file...
CVE-1999-0559
A system-critical Unix file or directory has inappropriate permissions...
CVE-1999-0559
Technical details for CVE-1999-0559 are not publicly available in the provided documents; monitor for updates.
CVE-1999-0560
A system-critical Windows NT file or directory has inappropriate permissions...
CVE-1999-0078
CVE-1999-0078 affects pcnfsd (rpc.pcnfsd). The vulnerability allows local users to change file permissions or execute arbitrary commands via arguments in the RPC call. Practical impact is limited to local-privilege abuse as described in multiple sources, with no public fixes reported in the docum...
PT-2000-1064 · Powerscripts · Powerscripts Plusmail
Name of the Vulnerable Software and Affected Versions: PowerScripts PlusMail affected versions not specified Description: The issue allows remote attackers to execute commands due to improper permissions on a password file. Recommendations: At the moment, there is no information about a newer...
CVE-1999-0982
The Sun Web-Based Enterprise Management WBEM installation script stores a password in plaintext in a world readable file...
CVE-1999-0402
CVE-1999-0402 affects wget 1.5.3, where the tool follows symlinks and changes permissions of the target file (not the symlink). The Red Hat, SUSE, and PT-Software entries corroborate the same description. The root cause is wget’s behavior when handling symlinks, leading to potential unintended pe...
Microsoft Internet Explorer 5 - FTP Password Storage
Microsoft Internet Explorer 5 - FTP Password Storage Microsoft Internet Explorer 5.0 for Windows 2000/Windows NT 4 FTP Password Storage Vulnerability source: https://www.securityfocus.com/bid/610/info FTP usernames and passwords for sites accessed via Internet Explorer 5.X are stored cleartext in...
Microsoft FrontPage Extensions authors.pwd Information Disclosure
The remote web server appears to be running with Microsoft FrontPage extensions. The file 'authors.pwd', which contains the encrypted passwords of FrontPage authors, can by accessed by anyone. A remote attacker could decrypt these passwords, or possibly overwrite this file. C Tenable Network...
oracle.8.passwd.txt
Date: Thu, 4 Mar 1999 15:44:37 -0600 From: James Kivisild To: [email protected] Subject: Oracle Plaintext Password I now know this has been mentioned before, however I've gotten a large number of responses from people about Oracle problems similar to this. As a first time Oracle installer, I...
asmcodes.txt
http://www.rootshell.com/ ----------------- begin asmcodes.txt --------------------- -- Assembly drop in replacements -- Probably useless, but can be a little fun ;- Here are some assembly instructions that you can drop into your favorite buffer overflow exploit. Generally, replacing existing...
CVE-1999-0408
Files created from interactive shell sessions in Cobalt RaQ microservers e.g. .bashhistory are world readable, and thus are accessible from the web server...
CVE-1999-1168
install.iss installation script for Internet Security Scanner ISS for Linux, version 5.3, allows local users to change the permissions of arbitrary files via a symlink attack on a temporary file...
Hancom Office 2007 - 'Reboot.ini' Clear-Text Passwords
source: https://www.securityfocus.com/bid/228/info During installation of BackOffice 4.0, a file called reboot.ini is created and stored in the \Program Files\Microsoft BackOffice directory. This file contains clear-text usernames and passwords for several services that may be created during...
CVE-1999-0402
wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself...