4654 matches found
CVE-2001-1170
The CVE concerns AmTote International’s homebet program. The vulnerability arises because homebet.log is stored in the homebet/ virtual directory, enabling remote attackers to access sensitive data and potentially disclose account and PIN numbers. The description does not specify affected version...
CVE-1999-1188
mysqld in MySQL 3.21 creates log files with world-readable permissions, which allows local users to obtain passwords for users who are added to the user database...
DEBIAN-CVE-2001-1494
script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command...
Доступ к пользовательским учетным записям в CentraOne (information leakage)
Учетный записи пользователей содержатся в открытом на чтение лог-файле...
HP-UX setuid rlpdaemon induced to make illicit file writes
This may have gone AWOL before. If there was a reason for the moderator dropping it I'd be interested to know. G.B. THE PROBLEM /usr/sbin/rlpdaemon in HP-UX is setuid root. Switches include "-l" to enable logging and "-L /some/thing" to select a logfile other than the default. When run by a...
PT-2001-1854 · Microsoft · Internet Explorer +2
Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 6 and earlier Description: The issue allows remote attackers to execute commands by spawning Telnet with a log file option on the command line and writing arbitrary code into an executable file which is later...
Несанкционированный доступ в Homebet (unauthorized access)
Для авторизации пользователя применяется 4-х символьный pin-код. Сообщения об ошибке для неправильного пин-кода и имени пользователя различаются. Лог-файл содержащий всю информацию доступен через веб...
Vulnerability in Amtote International homebet self service wagering system.
Product Description: Internet-based account wagering interface utilizing HTML and JAVA web based applications. The HTML functionality includes viewing current account balances, viewing current odds by track, placing wagers, reviewing wagers, and viewing official results/prices by track. The JAVA...
AmTote Homebet - World Accessible Log
source: https://www.securityfocus.com/bid/3370/info AmTote Homebet is an Internet-based account wagering interface. Homebet stores all account and corresponding PIN numbers in the homebet.log file stored in the Homebet virtual directory. On a default installation, the homebet.log file is world...
CVE-1999-1256
Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in the spoolmain.log file when a new database is created, which allows local users to obtain the password from that file...
CVE-1999-1322
The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange create a log file, exchverify.log, which contains usernames and passwords in plaintext...
Oracle Internet Directory LDAP Daemon does not check write permissions properly
Overview The Oracle LDAP Daemon oidldapd version 2.1.1.1, which ships with Oracle version 8i for Linux version 8.1.7, does not check write permissions properly. This can allow a local user to delete or write to any file on the system. Description The Oracle LDAP Daemon oidldapd version 2.1.1.1 do...
Релеинг через poprelayd (message relaying)
Можно обмануть защиту от релеинга через Pop-before-smtp подменив запись в лог-файле...
Проблема с лог-файлом в Samba (directory traversal)
При использовании лог-файлов с именами соответствующими NETBIOS-именам компьютером, если имся компьютера содержит ../ - будет перезаписан файл в директории более высокого уровня. NETBIOS-имя может содержать до 15 символов...
[SECURITY] [DSA-065-1] samba remote file append/creation problem
Package : samba Problem type : remote file append/creation Debian-specific: no Michal Zalewski discovered that samba does not properly validate NetBIOS names from remote machines. By itself that is not a problem, except if Samba is configure to write log-files to a file that includes the NetBIOS...
CVE-2001-0415
REDIPlus program, REDI.exe, stores passwords and user names in cleartext in the StartLog.txt log file, which allows local users to gain access to other accounts...
Дырка в perfmon под SunOS
Некорректная работа с лог-файлом позволяет переписать любой системный файл...
Junsoft JSparm 4.0 - Logging Output File
source: https://www.securityfocus.com/bid/2515/info JSparm is the Junsoft Performance Analysis Report Maker package. This software package provides an enhanced perfmon performance monitoring package and interface, as well as a performance report generation interface. A problem with the package...