PT-2006-2389 · Trend Micro · Trend Micro Interscan Messaging Security Suite

Name of the Vulnerable Software and Affected Versions: Trend Micro InterScan Messaging Security Suite versions prior to 5.7.0.1121 Description: The issue concerns the ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite, which uses insecure DACLs for critical files. This allows...

CVE-2003-1213

The default installation of MaxWebPortal 1.30 stores the portal database under the web document root with insecure access control, which allows remote attackers to obtain sensitive information via a direct request to database/db2000.mdb...

CVE-2003-1133

Rit Research Labs The Bat! 1.0.11 through 2.0 creates new accounts with insecure ACLs, which allows local users to read other users' email messages...

CVE-2002-2324

The "System Restore" directory and subdirectories, and possibly other subdirectories in the "System Volume Information" directory on Windows XP Professional, have insecure access control list ACL permissions, which allows local users to access restricted files and modify registry settings...

Midicart ASP - Remote Customer Information Retrieval

Midicart ASP - Remote Customer Information Retrieval source: https://www.securityfocus.com/bid/5438/info Midicart ASP is a commercially available e-commerce solution distributed by Coxco Support. It is available for the Microsoft Windows operating system. The default installation of Midicart ASP...

CVE-2002-0066

Funk Software Proxy Host 3.x before 3.09A creates a Named Pipe that does not require authentication and is installed with insecure access control, which allows local and possibly remote users to use the Proxy Host's configuration utilities and gain privileges...

[Real Security] Advisory for Nudester 1.10

------------------------- Real Security Advisory 1 Author: Cyph3r www.Real-Security.org Date: 08/16/2001 ------------------------- Vulnerable: Nudester 1.10and below? OS: Win9x/me/2k/nt/xp Site: www.nudester.org ------------------------- - Severity: Malicious users can gain full access to the use...