3734 matches found
Dangerous information in CentraOne Log files, possible user impersonation
-----BEGIN PGP SIGNED MESSAGE----- Vendor Contacted: 12/7/01 Date Published: 12/17/01 Bugtraq ID: - CVE CAN: - Title: Dangerous information being recorded in CentraOne Log files, possible user impersonation Severity: Medium Remote Exploit: No Local Exploit: Yes Vulnerability Description: Centra i...
Дырки в Apache (information leakage, directory traversal)
При создании .log-файла виртуального сервера не проверяется правильность заголовка Host, переданного клиентом, что позволяет создать лог файл в любом каталоге. В некоторых случаях возможно получить листинг каталога добавив /?M=D к запросу...
Many vulnerabilities in LSF 4.0
Hello. Load Shareing Facility from Platform http://www.platform.com is a suite of application resource management products that schedule, monitor and analyze the workload for a network of computers. In April 2001 I discovered some security bugs in it. I posted my exploits with technical details t...
Apache Httpd < 1.3.22 : split-logfile can cause arbitrary log files to be written to
A vulnerability was found in the split-logfile support program. A request with a specially crafted Host: header could allow any file with a .log extension on the system to be written to...
CVE-1999-1042
Cisco Resource Manager (CRM) versions 1.0 and 1.1 create world-readable log files and temporary files, exposing sensitive information (user IDs, passwords, SNMP community strings) to local users. The root cause is improper file permissions on diagnostic artifacts, leading to partial confidentiali...
CVE-1999-1042
Cisco Resource Manager CRM 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitive information, to local users such as user IDs, passwords and SNMP community strings...
Дырка в Oracle ADI (cleartext passwords)
Пароли содержатся в лог-файле в открытом виде...
CVE-2001-0300
oidldapd 2.1.1.1 in Oracle 8.1.7 records log files in a directory ldaplog that has world-writable permissions, which may allow local users to delete logs and/or overwrite other files via a symlink attack...
Дырка в pagelog (traveral path)
Можно обратиться к любому .log-Файлу в системе и создать .log и .txt файл в любом катклоге, т.к. CGI не проверяет обратный путь в директории...
Небольшая дырка в I-Gear
Слишком длинные записи в log-Файлах приводят к невозможности просмотреть журнал...
[ Hackerslab bug_paper ] Linux ORACLE 8.1.5 vulnerability
================================================================================ Hackerslab bugpaper Linux ORACLE 8.1.5 vulnerability ================================================================================ File : Oracle 8.1.5 SYSTEM : LINUX Tested by RedHat Linux 6.2 INFO : There are two...
CVE-1999-0444
Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log files...
CVE-1999-0444: Undefined Security Weakness
Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log files...
Oracle 8 8.1.5 - Intelligent Agent (1)
source: https://www.securityfocus.com/bid/585/info A vulnerability in the Oracle Intelligent Agent allows local malicious users to execute arbitrary commands and to create world writable files as the root user. The problem lies in the dbsnmp program located in $ORACLEHOME/bin . This setuid root a...