4738 matches found
CVE-2000-0402
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator sa account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability...
CVE-1999-0961
HPUX sysdiag contains a local privilege escalation where an unprivileged user can gain root via a symlink attack during log file creation. The Root Cause is a symlink handling vulnerability in the log file creation path. Affected software is HP-UX sysdiag (no specific version ranges provided in t...
netsurfer.txt
Software: Netsurfer for UNIX version? Platforms: UNIX various ISPs Problem: Any local user can obtain passwords and credit card numbers by elsewhere A problem exists in Netsufer's, Inc. Netsurfer software see www.netsurfer.com that allows the average local user anyone in the user group to obtain...
CVE-1999-0596
A Windows NT log file has an inappropriate maximum size or retention period...
CVE-1999-0596
CVE-1999-0596 concerns Windows NT where a log file is governed by an inappropriate maximum size or retention period. Documents confirm the affected software is Windows NT and that the underlying issue is misconfigured log file handling, but do not specify affected build versions, exploit details,...
CVE-1999-1562
gFTP FTP client 1.13, and other versions before 2.0.0, records a password in plaintext in 1 the log window, or 2 in a log file...
sims-sds.txt
Date: Fri, 25 Dec 1998 19:51:56 PST From: Dana Jones Reply-To: Bugtraq List To: [email protected] Subject: Vulnerability SIMS 3.x Sun Internet Mail Server and SDS 1.x & 3.1 Sun LDAP Directory services vulnerability. /var/opt/SUNWconn/ldap/log/slapd.log is used to log ldap connects/operations. ...
nobo-DoS.txt
Date: Thu, 4 Feb 1999 16:52:00 -0500 From: Andrew J. Gavin To: [email protected] Subject: NOBO denial of service As reported by [email protected] approximately a week ago, nobo a back orifice scanning detector has a buffer overflow problem that will crash the program remotely. Sending a UDP packe...
oracle.8.passwd.txt
Date: Thu, 4 Mar 1999 15:44:37 -0600 From: James Kivisild To: [email protected] Subject: Oracle Plaintext Password I now know this has been mentioned before, however I've gotten a large number of responses from people about Oracle problems similar to this. As a first time Oracle installer, I...
CVE-1999-0596
A Windows NT log file has an inappropriate maximum size or retention period...
PT-1999-1214 · Microsoft · Windows Nt
Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue concerns a Windows NT log file having an inappropriate maximum size or retention period. Recommendations: At the moment, there is no information about a newer version that...
CVE-1999-1280
Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing, which logs user names and passwords in cleartext in the test.log file...
CVE-1999-1322
The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange create a log file, exchverify.log, which contains usernames and passwords in plaintext...
HP JetAdmin 1.0.9 Rev. D - symlink
source: https://www.securityfocus.com/bid/157/info A vulnerability exists in HP's JetAdmin Rev. D.01.09 software. Due to its failure to check if it is following a symbolic link, it is possible for an attacker to create a link from /tmp/jetadmin.log to anywhere on the filesystem, with permissions...
HP JetAdmin 1.0.9 Rev. D - symlink
HP JetAdmin 1.0.9 Rev. D - symlink source: https://www.securityfocus.com/bid/157/info A vulnerability exists in HP's JetAdmin Rev. D.01.09 software. Due to its failure to check if it is following a symbolic link, it is possible for an attacker to create a link from /tmp/jetadmin.log to anywhere o...
IBM AIX 4.2.1 - usrbinportmir Local Buffer Overflow Insecure Temporary File Creation
IBM AIX 4.2.1 - usrbinportmir Local Buffer Overflow Insecure Temporary File Creation / source: https://www.securityfocus.com/bid/385/info AIX version 4.2.1 introduced a new command titled 'portmir'. This new program had two notable vulnerabilites. First it contained a buffer overflow which allowe...
