3520 matches found
CVE-2001-1556
The log files in Apache web server contain information directly supplied by clients and does not filter or quote control characters, which could allow remote attackers to hide HTTP requests and spoof source IP addresses when logs are viewed with UNIX programs such as cat, tail, and grep...
CVE-2002-2001
jmcce 1.3.8 in Mandrake 8.1 creates log files in /tmp with predictable names, which allows local users to overwrite arbitrary files via a symlink attack...
CVE-2001-1556
Technical details for CVE-2001-1556 are not publicly provided in the connected documents. Monitor for updates.
CVE-2001-1550
CentraOne 5.2 and Centra ASP with basic authentication enabled creates world-writable base64 encoded log files, which allows local users to obtain cleartext passwords from decoded log files and impersonate users...
CVE-2001-1550
CVE-2001-1550 affects CentraOne 5.2 and Centra ASP when using basic authentication. The Centra Smart Connect patch CEN5.2-03 reportedly stores sensitive information in log files that are world-writable, and these log files contain a base64-encoded username and password in plaintext. A local attac...
CVE-2002-1694
The CVE refers to Microsoft Internet Information Server (IIS) 4.0 where log files are opened with FILE_SHARE_READ and FILE_SHARE_WRITE permissions. This shared access could allow remote attackers to modify log file contents while IIS is running, representing a potential integrity impact on logs. ...
CVE-2002-1695
Norton Internet Security 2001 opens log files with FILESHAREREAD and FILESHAREWRITE permissions, which could allow remote attackers to modify the log file contents while Norton Internet Security is running...
CVE-2002-1695: Undefined Security Weakness
Norton Internet Security 2001 opens log files with FILESHAREREAD and FILESHAREWRITE permissions, which could allow remote attackers to modify the log file contents while Norton Internet Security is running...
CVE-2002-1694: Undefined Security Weakness
Microsoft Internet Information Server IIS 4.0 opens log files with FILESHAREREAD and FILESHAREWRITE permissions, which could allow remote attackers to modify the log file contents while IIS is running...
CVE-2005-1969
The CVE-2005-1969 entry describes a cross-site scripting (XSS) vulnerability in Pragma Systems Telnetserver 6.0 that allows remote attackers to inject arbitrary web script or HTML and hide activities in log files by inserting an HTML comment "
CVE-2005-1969
Cross-site scripting XSS vulnerability in Pragma Systems Telnetserver 6.0 allows remote attackers to inject arbitrary web script or HTML, and hide activities in log files, via a "!--" HTML comment in a session...
Pragma TelnetServer crossite scripting
Crossite scripting if log files are stored in HTML format...
CVE-2005-1909
The web server control panel in 602LAN SUITE 2004 allows remote attackers to make it more difficult for the administrator to read portions of log files via a "!-" sequence in an HTTP GET request in the logon, possibly due to a cross-site scripting XSS vulnerability...
CVE-2005-1909
The CVE-2005-1909 entry concerns the 602LAN SUITE 2004 web server control panel where remote attackers can disrupt administrator log readability by sending a GET request containing a
PHP Stat Administrative User Authentication Bypass
=========================================================== ============================================================ Title: PHP Stat Vulnerability discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 25/05/2005 Severity: Medium. PHP Stat Administrative User Authentication...
CVE-2005-0392
ppxp does not drop root privileges before opening log files, which allows local users to execute arbitrary commands...
CVE-2005-0392
CVE-2005-0392 is a local privilege-escalation flaw in the ppxp PPP program where root privileges are not dropped when opening potentially user-supplied log files, enabling an unprivileged user to trigger a root shell. This is discussed in Debian advisories DSA-725-1/DSA-725-2 and mirrored in Open...
CVE-2005-0392
ppxp does not drop root privileges before opening log files, which allows local users to execute arbitrary commands...