3520 matches found
CVE-2005-1606
CVE-2005-1606 affects H-Sphere Winbox 2.4.2 and 2.4.3 RC1. The underlying issue is that usernames and passwords are stored in plaintext in world-readable log files, enabling local users to gain privileges. The documents do not provide explicit exploit details, affected components beyond the log l...
CVE-2005-1516
DList dlist.exe in DMail 3.1a allows remote attackers to bypass authentication, read log files, and shutdown the system via a sendlog command with an incorrect password hash, which is not properly handled by the cmdsendlog function...
CVE-2005-1516
The CVE-2005-1516 issue affects NetWin DMail 3.1a’s DList component. The vulnerability enables a remote attacker to bypass authentication, read log files, and shut down the system by sending a log request (sendlog) with an incorrect password hash, which is not properly handled by the internal _cm...
CVE-2005-1516
DList dlist.exe in DMail 3.1a allows remote attackers to bypass authentication, read log files, and shutdown the system via a sendlog command with an incorrect password hash, which is not properly handled by the cmdsendlog function...
Positive Software H-Sphere Winbox 2.4 - Sensitive Logfile Content Disclosure
source: https://www.securityfocus.com/bid/13559/info It is reported that Positive Software H-Sphere Winbox stores user account information in a plaintext format inside of application log files. As a result, user credentials could be exposed to other local users who have permissions to access the...
CVE-2005-1167
Musicmatch 10.00.2047 and earlier store log files in the Program Files directory instead of the user profile, which may allow local users to obtain sensitive information...
CVE-2005-0549
Cross-site scripting XSS vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the "View Log Files" function...
CVE-2005-1167
Musicmatch 10.00.2047 and earlier store log files in the Program Files directory instead of the user profile, which may allow local users to obtain sensitive information...
CVE-2005-1167
Technical details about CVE-2005-1167 are not publicly provided in the supplied documents. The materials only note that Musicmatch 10.00.2047 and earlier store logs in Program Files; no affected versions, exploit info, or fixes are listed. Monitor for updates.
CVE-2005-1167: Undefined Security Weakness
Musicmatch 10.00.2047 and earlier store log files in the Program Files directory instead of the user profile, which may allow local users to obtain sensitive information...
Improper log file storage in Musicmatch software
Hyperdose Security Advisory Name: Improper Log file storage in Musicmatch software Systems Affected: Musicmatch v10.00.2047 or earlier according to Yahoo v9.00.5059 and earlier are also affected Severity: Moderate Author: Robert Fly - [email protected] Advisory URL:...
CVE-2005-0549: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the "View Log Files" function...
CVE-2005-0694
Hosting Controller 6.1 Hotfix 1.7 and earlier stores log files under the web root, which allows remote attackers to obtain sensitive information via a direct request to HCDiskQuotaService.csv...
CVE-2005-0481: Undefined Security Weakness
TrackerCam 5.12 and earlier allows remote attackers to read log files via the fn parameter in a direct request to the ComGetLogFile.php3 script...
PT-2004-3290 · Blue Coat · Blue Coat Security Gateway Os
Name of the Vulnerable Software and Affected Versions: Blue Coat Security Gateway OS versions 3.0 through 3.1.3.13 Blue Coat Security Gateway OS version 3.2.1 Description: The web-based Management Console in the affected software stores a private key and its passphrase in plaintext in a log file...
Debian DSA-566-1 : cupsys - unsanitised input
An information leak has been detected in CUPS, the Common UNIX Printing System, which may lead to the disclosure of sensitive information, such as user names and passwords which are written into log files. The used patch only eliminates the authentication information in the device URI which is...
[SECURITY] [DSA 566-1] New CUPS packages fix information leak
-------------------------------------------------------------------------- Debian Security Advisory DSA 566-1 [email protected] http://www.debian.org/security/ Martin Schulze October 14th, 2004 http://www.debian.org/security/faq -...
Multiple cups bugs
Empty packet to UDP/631 causes browsing service to fail. Foomatic printers driver code execution, information leak from log files...
CUPS -- local information disclosure
Certain methods of authenticated remote printing in CUPS can disclose user names and passwords in the log files. A workaround for this problem is to set more strict access permissions on the CUPS logfiles...