3878 matches found
[BUGZILLA] Security Advisory - remote database password disclosure
Bugzilla Security Advisory January 2nd, 2002 Severity: major remote database password disclosure, bug 186383 minor local file permissions, bug 183188 Summary ======= All Bugzilla installations are advised to upgrade to the latest versions of Bugzilla, 2.14.5 and 2.16.2, both released today...
PT-2002-2435 · Mandrake · Mandrake
Name of the Vulnerable Software and Affected Versions: Mandrake versions 8.2 Description: The Standard security setting for the Mandrake-Security package installs home directories with world-readable permissions. This could allow local users to read other users' files. Recommendations: For Mandra...
[NEWS] Directory Traversal Vulnerabilities in FTP Clients
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion Beyond Security would like to welcome Tiscali World Online to our service provider team. For more info on their service offering IP-Secure,...
WinXP Pro(Gold) Insecure System Restore File Permissions
WinXP ProGold Insecure System Restore File Permissions On the Windows XP ProfessionalGold, the "System Restore" files are not protected properly by NTFS ACL, so every local user can access these important files. System Restore files are stored in the "System Volume Information" directory, and thi...
Interbase 56 - GDS_Lock_MGR UMask File Permission Changing
Interbase 56 - GDSLockMGR UMask File Permission Changing // source: https://www.securityfocus.com/bid/5805/info Interbase is a SQL database distributed and maintained by Borland. It is available for Unix and Linux operating systems. The gdslockmgr program within Interbase is typically installed...
Cacti security issues
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Name: Cacti security issues Original: http://www.knights-of-the-routing-table.org /advisories/krt00120020903cacti.txt - - General info - As quoted from http://www.rrdtool.org: "Cacti's goal is to be a complete frondend to rrdtool, storing all of the...
CVE-2002-0824
BSD pppd allows local users to change the permissions of arbitrary files via a symlink attack on a file that is specified as a tty device...
CVE-2002-0760
Race condition in bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, decompresses files with world-readable permissions before setting the permissions to what is specified in the bzip2 archive, which could allow local users to read the...
Mac OS X Finder creates world-readable ".FBCIndex" file thereby disclosing sensitive information
Overview Mac OS X's Find-By-Content indexing may store file data where it can be served to remote users by Apache. Description The Find-By-Content feature of Mac OS X generates indexing data from the contents of files in each directory. It then stores the indexing data for each directory in a...
FreeBSD Security Advisory FreeBSD-SA-02:32.pppd
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:32.pppd Security Advisory The FreeBSD Project Topic: exploitable race condition in pppd Category: core Module: pppd Announced: 2002-07-31 Credits: Sebastian Krahmer...
Symbolic link problem in pppd
It's possible to change file permisions via symbolic link by using it as a tty device...
FreeBSD-SA-02:32.pppd
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:32.pppd Security Advisory The FreeBSD Project Topic: exploitable race condition in pppd Category: core Module: pppd Announced: 2002-07-31 Credits: Sebastian Krahmer...
FreeBSD 4.x / NetBSD 1.4.x/1.5.x/1.6 / OpenBSD 3 - pppd Arbitrary File Permission Modification Race Condition
source: https://www.securityfocus.com/bid/5355/info A vulnerability has been reported in some versions of the pppd daemon included with multiple BSD distributions. A race condition error in the code may result in the pppd process changing the file permissions on an arbitrary system file. pppd wil...
FreeBSD 4.x NetBSD 1.4.x1.5.x1.6 OpenBSD 3 - pppd Arbitrary File Permission Modification Race Condition
FreeBSD 4.x NetBSD 1.4.x1.5.x1.6 OpenBSD 3 - pppd Arbitrary File Permission Modification Race Condition source: https://www.securityfocus.com/bid/5355/info A vulnerability has been reported in some versions of the pppd daemon included with multiple BSD distributions. A race condition error in the...
CVE-2002-0265
Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable permissions, which allows local users to gain privileges by modifying the file...
AlienForm2 CGI script: arbitrary file read/write
===================================================================== Vulnerable: AlienForm2 revision 1.5 Category: Perl/CGI coding errors Impact: Subject to file permissions, an attacker can read any file on the server, append arbitrary data to any existing file or write arbitrary data to new...
Уязвимость утилиты для UPS
Hello 3APA3A! APC American Power Conversion Corp. http://www.apc.com PowerChute plus 5.0.2 for Windows 95/98 Утилита мониторинга источников бесперебойного питания. После установки, без ведома пользователя открывает полный сетевой доступ под именем PWRCHUTE к своему каталогу Program FilesPwrchute...
CVE-2002-0355
netstat in SGI IRIX before 6.5.12 allows local users to determine the existence of files on the system, even if the users do not have the appropriate permissions...