CVE-2007-5439

CVE-2007-5439 affects CA eTrust ITM (Threat Manager) 8.1. The issue is that sensitive user information is stored in log files with predictable names, allowing a remote attacker to obtain the data via unspecified vectors. This is stated across the CVE records, including NVD, and connected document...

CVE-2007-5439

CA formerly Computer Associates eTrust ITM Threat Manager 8.1 stores sensitive user information in log files with predictable names, which allows remote attackers to obtain this information via unspecified vectors...

CVE-2007-5024

EMC VMware Server before 1.0.4 Build 56528 writes passwords in cleartext to unspecified log files, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2005-3620...

CVE-2007-5024

EMC VMware Server before 1.0.4 Build 56528 writes passwords in cleartext to unspecified log files, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2005-3620...

CVE-2007-5024

EMC VMware Server before 1.0.4 Build 56528 writes passwords in cleartext to unspecified log files, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2005-3620...

CVE-2007-5024

CVE-2007-5024 affects EMC VMware Server prior to 1.0.4 Build 56528, where passwords are written in cleartext to unspecified log files. This local-information disclosure could allow a local attacker to read credentials by accessing these log files. The description explicitly notes this is a differ...

CVE-2007-4323

DenyHosts 2.6 does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a client protocol version...

CVE-2007-4321

fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a client protocol versi...

CVE-2007-4323

DenyHosts 2.6 does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a client protocol version...

Fail2ban: Denial of service

Background Fail2ban is a tool for parsing log files and banning IP addresses which make too many password failures. Description A vulnerability has been discovered in Fail2ban when parsing log files. Impact A remote attacker could send specially crafted SSH login banners to the vulnerable host,...

ecms-exec.txt

!/usr/bin/perl Entertainment CMS Remote Command Execution Exploit Download: http://rapidshare.com/files/39640099/enter-cms.rar Exploit: http://site.com/path/custom.php?pagename=Local File Inclusion; Example: http://multimedia.mydlstore.net/custom.php?pagename=teeeeeeeeeeee RST WAS MOVED TO...

CVE-2007-2765

blockhosts.py in BlockHosts before 2.0.3 does not properly parse daemon log files, which allows remote attackers to add arbitrary deny entries to the /etc/hosts.allow file and cause a denial of service by adding arbitrary IP addresses to a daemon log file, as demonstrated by logging in through ss...

Design/Logic Flaw

Bradford CampusManager Network Control Application Server 3.16 allows remote attackers to obtain sensitive information backup, log, and configuration files via direct request for certain files in 1 /runTime/ or 2 /remediationReports/...

CVE-2007-1926

Cross-site scripting XSS vulnerability in JBMC Software DirectAdmin before 1.293 does not properly display log files, which allows remote authenticated users to inject arbitrary web script or HTML via 1 http or 2 ftp requests logged in /var/log/directadmin/security.log; 3 allows context-dependent...

Cross site scripting

Cross-site scripting XSS vulnerability in JBMC Software DirectAdmin before 1.293 does not properly display log files, which allows remote authenticated users to inject arbitrary web script or HTML via 1 http or 2 ftp requests logged in /var/log/directadmin/security.log; 3 allows context-dependent...

CVE-2007-1926

Cross-site scripting XSS vulnerability in JBMC Software DirectAdmin before 1.293 does not properly display log files, which allows remote authenticated users to inject arbitrary web script or HTML via 1 http or 2 ftp requests logged in /var/log/directadmin/security.log; 3 allows context-dependent...

CVE-2007-1926

CVE-2007-1926 affects JBMC Software DirectAdmin before 1.293. The vulnerability arises because DirectAdmin does not properly display log files, enabling cross-site scripting (XSS) via user-controlled input logged in multiple files (e.g., /var/log/directadmin/security.log, /var/log/messages, /var/...

ScarNews 1.2.1 - 'sn_admin_dir' Local File Inclusion

Perl BeyazKurt ScarNews snadmindir Local File Inclusion Exploit D0rk : "Powered by ScarNews v1.2.1" dorka gerenk yok ama nese :p kodlad...m 2 scriptte di.er makinayla uctu : : Str0ke üzme kendini olur böle .eler : Download : http://www.scar4u.de/scripts/scarnews/download.html Coded by elden ele...

JSBoard 2.0.10 - login.php?table Local File Inclusion

JSBoard 2.0.10 - login.php?table Local File Inclusion !/usr/bin/perl jsboard 2.0.10login.php tableLocal File Inclusion Exploit D.Script: http://kldp.net/frs/download.php/1729/jsboard-2.0.10.tar.gz if$table && fileexists"data/$table/config.php" include "data/$table/config.php"; Discovered & Coded ...

JSBoard 2.0.10 (login.php table) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =================================================================== JSBoard 2.0.10 login.php table Local File Inclusion Vulnerability =================================================================== !/usr/bin/perl jsboard 2.0.10login.ph...