Debian Security Advisory DSA 900-2 (fetchmail)

The remote host is missing an update to fetchmail announced via advisory DSA 900-2. Due to restrictive dependency definition the updated fetchmailconf package couldn SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

Debian: Security Advisory (DSA-900-3)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-1741

Multiple race conditions in suexec in Apache HTTP Server httpd 2.2.3 between directory and file validation, and their usage, allow local users to gain privileges and execute arbitrary code by renaming directories or performing symlink attacks. NOTE: the researcher, who is reliable, claims that th...

Microsoft DNS Server (Dynamic DNS Updates) Remote Exploit

Exploit for unknown platform in category remote exploits ========================================================= Microsoft DNS Server Dynamic DNS Updates Remote Exploit ========================================================= / Exploiting Microsoft DNS Dynamic Updates for Fun and profit Andres...

CVE-2006-7141

Absolute path traversal vulnerability in Oracle Database Server, when utlfiledir is set to a wildcard value or "CREATE ANY DIRECTORY to PUBLIC" privileges exist, allows remote authenticated users to read and modify arbitrary files via full filepaths to utlfile functions such as 1 utlfile.putline...

Check Point VPN-1 SecureClient 4.0 < 4.1 - Policy Bypass

source: https://www.securityfocus.com/bid/15757/info VPN-1 SecureClient is reported prone to a policy bypass vulnerability. This issue is due to a failure of the application to securely implement remote administrator-provided policies on affected computers. This issue allows remote VPN users to...

DSA-900-3 fetchmail - programming error

Bulletin has no description...

IlohaMail Insecure Configuration Files

------------------------------------------------ Advisory Name : IlohaMail Insecure Configuration Files Release Date : 10 January, 2004 Application : IlohaMail http://ilohamail.org/ Vulnerable: IlohaMail-0.8.14-rc1 and lower Not Vulnerable: IlohaMail-0.8.14-rc2 Author : SRR Project Group of Ready...

Linksys WAP55AG 1.0.7 - SNMP Community String Insecure Configuration

Linksys WAP55AG 1.0.7 - SNMP Community String Insecure Configuration source: https://www.securityfocus.com/bid/9688/info Linksys WAP55AG appliance has been reported prone to an insecure default configuration vulnerability. It has been reported that all SNMP MIB Management Information Base communi...

Linksys WAP55AG 1.0.7 - SNMP Community String Insecure Configuration

source: https://www.securityfocus.com/bid/9688/info Linksys WAP55AG appliance has been reported prone to an insecure default configuration vulnerability. It has been reported that all SNMP MIB Management Information Base community strings, even read/write strings may be disclosed to a remote...

Sun Solstice AdminSuite ships with insecure default configuration

Overview The sadmind service provided on many Solaris and SunOS systems ships with an insecure default configuration that allows remote users to execute arbitrary commands with superuser root privileges. Description The Sun Microsystems Solstice AdminSuite is a graphical tool that allows Solaris...

RealOne Player for Linux 2.2 Alpha - Insecure Configuration File Permission Privilege Escalation

RealOne Player for Linux 2.2 Alpha - Insecure Configuration File Permission Privilege Escalation // source: https://www.securityfocus.com/bid/8571/info The configuration files for the RealOne Player are installed in the a hidden folder in a users home directory. The issue presents itself, because...

RealOne Player for Linux 2.2 Alpha - Insecure Configuration File Permission Privilege Escalation

// source: https://www.securityfocus.com/bid/8571/info The configuration files for the RealOne Player are installed in the a hidden folder in a users home directory. The issue presents itself, because configuration files stored in this directory are installed with insecure permissions. This means...

Multiple McAfee ePolicy Orchestrator bugs

Buffer overflows, format string bugs, MSDE is installed in insecure configuration...

SyGate 5.0 - Insecure UDP Source Port Firewall Bypass Weak Default Configuration

source: https://www.securityfocus.com/bid/6684/info It has been reported that the Sygate Pro firewall permits traffic originating from UDP source port 137 or 138 by default. This may allow a remote attacker to bypass the firewall. nmap -vv -P0 -sU %victimsipaddress% -g 137...

Apache Tomcat default installation contains sample applications that disclose webroot path

Overview There is an insecure default configuration in Apache Tomcat web server that places several sample applications in the webroot. Remote users may be able to use these applications to gain sensitive information about the server's configuration. Description There are several sample...

phpGroupWare 0.9.13 - Debian Package Configuration

source: https://www.securityfocus.com/bid/4424/info PHPGroupWare is a freely available, open source groupware system written in PHP. It is distributed and maintained by the PHPGroupWare project. Debian packages of PHPGroupWare ship with an insecure default configuration. The PHP magicquotesgpc...

BSCW: Vulnerabilities and Problems

------------------------------------------------------------------------ -= BSCW Security Issues - Audit report 02 - 7. Sept. 2001 =- ------------------------------------------------------------------------ BSCW is a groupware system that runs on a webserver. For more information about BSCW visit...

CVE-2001-0620

iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server NAS LDAP database and read arbitrary files by obtaining the cleartext administrator username and password from the configuration file, which has insecure permissions...

permission probs with Arkeia

While working with the commercial version of Arkeia backup software I noticed it creates most of it's "database" files with the permissions of 666. This was version 4.2.8-2 of the server, and I had noticed this several updates ago, so it's been going on for some time. The database files are locat...