3517 matches found
CVE-2001-0730
CVE-2001-0730 affects Apache 1.3.x by a flaw in the split-logfile support: a crafted HTTP request with a slash in the Host header can cause the server to overwrite any file ending in ".log" on the system. Affected version in public reports centers on Apache 1.3.20 with the ability to write arbitr...
CVE-2001-1550
CentraOne 5.2 and Centra ASP with basic authentication enabled creates world-writable base64 encoded log files, which allows local users to obtain cleartext passwords from decoded log files and impersonate users...
CVE-2001-1556
The log files in Apache web server contain information directly supplied by clients and does not filter or quote control characters, which could allow remote attackers to hide HTTP requests and spoof source IP addresses when logs are viewed with UNIX programs such as cat, tail, and grep...
Dangerous information in CentraOne Log files, possible user impersonation
-----BEGIN PGP SIGNED MESSAGE----- Vendor Contacted: 12/7/01 Date Published: 12/17/01 Bugtraq ID: - CVE CAN: - Title: Dangerous information being recorded in CentraOne Log files, possible user impersonation Severity: Medium Remote Exploit: No Local Exploit: Yes Vulnerability Description: Centra i...
Дырки в Apache (information leakage, directory traversal)
При создании .log-файла виртуального сервера не проверяется правильность заголовка Host, переданного клиентом, что позволяет создать лог файл в любом каталоге. В некоторых случаях возможно получить листинг каталога добавив /?M=D к запросу...
Many vulnerabilities in LSF 4.0
Hello. Load Shareing Facility from Platform http://www.platform.com is a suite of application resource management products that schedule, monitor and analyze the workload for a network of computers. In April 2001 I discovered some security bugs in it. I posted my exploits with technical details t...
Apache Httpd < 1.3.22 : split-logfile can cause arbitrary log files to be written to
A vulnerability was found in the split-logfile support program. A request with a specially crafted Host: header could allow any file with a .log extension on the system to be written to...
CVE-1999-1042
Cisco Resource Manager (CRM) versions 1.0 and 1.1 create world-readable log files and temporary files, exposing sensitive information (user IDs, passwords, SNMP community strings) to local users. The root cause is improper file permissions on diagnostic artifacts, leading to partial confidentiali...
CVE-1999-1042
Cisco Resource Manager CRM 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitive information, to local users such as user IDs, passwords and SNMP community strings...
Дырка в Oracle ADI (cleartext passwords)
Пароли содержатся в лог-файле в открытом виде...
CVE-2001-0300
oidldapd 2.1.1.1 in Oracle 8.1.7 records log files in a directory ldaplog that has world-writable permissions, which may allow local users to delete logs and/or overwrite other files via a symlink attack...
Дырка в pagelog (traveral path)
Можно обратиться к любому .log-Файлу в системе и создать .log и .txt файл в любом катклоге, т.к. CGI не проверяет обратный путь в директории...
Небольшая дырка в I-Gear
Слишком длинные записи в log-Файлах приводят к невозможности просмотреть журнал...
[ Hackerslab bug_paper ] Linux ORACLE 8.1.5 vulnerability
================================================================================ Hackerslab bugpaper Linux ORACLE 8.1.5 vulnerability ================================================================================ File : Oracle 8.1.5 SYSTEM : LINUX Tested by RedHat Linux 6.2 INFO : There are two...
CVE-1999-0444
Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log files...
CVE-1999-0444: Undefined Security Weakness
Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log files...
Oracle 8 8.1.5 - Intelligent Agent (1)
source: https://www.securityfocus.com/bid/585/info A vulnerability in the Oracle Intelligent Agent allows local malicious users to execute arbitrary commands and to create world writable files as the root user. The problem lies in the dbsnmp program located in $ORACLEHOME/bin . This setuid root a...