2958 matches found
CVE-2003-1046
describecomponents.cgi in Bugzilla 2.17.3 and 2.17.4 does not properly verify group membership when bug entry groups are used, which allows remote attackers to list component descriptions for otherwise restricted products...
CVE-2004-0703
Unknown vulnerability in the administrative controls in Bugzilla 2.17.1 through 2.17.7 allows users with "grant membership" privileges to grant memberships to groups that the user does not control...
CVE-2004-0703
Unknown vulnerability in the administrative controls in Bugzilla 2.17.1 through 2.17.7 allows users with "grant membership" privileges to grant memberships to groups that the user does not control...
CVE-2003-1046
describecomponents.cgi in Bugzilla 2.17.3 and 2.17.4 does not properly verify group membership when bug entry groups are used, which allows remote attackers to list component descriptions for otherwise restricted products...
CVE-2003-1046
The CVE-2003-1046 entry concerns Bugzilla versions 2.17.3 and 2.17.4. Describecomponents.cgi fails to properly verify group membership when bug entry groups are used, allowing remote attackers to list component descriptions for products that should be restricted. The core issue is an insufficient...
CVE-2003-0177
SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, does not follow "-" entries in the /etc/group file, which may cause subsequent group membership entries to be processed inadvertently...
CVE-2003-0177
SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, does not follow "-" entries in the /etc/group file, which may cause subsequent group membership entries to be processed inadvertently...
CVE-2002-2185
The Internet Group Management Protocol IGMP allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which causes the target to stop sending reports to the router and effectively disconnect the group from...
IGMP DoS
By sending unicast membership report to attacked host it's possible to prevent one from registering in group...
FreeBSD k5su problems
Wheel group membership is not checked fo k5su...
FreeBSD-SA-02:24.k5su
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:24.k5su Security Advisory The FreeBSD Project Topic: k5su utility does not honor wheel' group Category: kerberos5 Module: kerberos5/usr.bin/k5su Announced: 2002-05-20...
Microsoft Windows Guest Account Belongs to a Group
Using the supplied credentials, Nessus was able to determine that the 'Guest' user belongs to groups other than 'Guests' RID 546 or 'Domain Guests' RID 514. Guest users should not have any additional privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10907;...
Important: Red Hat Security Advisory: : LPRng fails to drop supplemental group membership
When LPRng drops uid and gid, it fails to drop membership in its supplemental groups. LPRng fails to drop supplemental group membership at init time, though it does properly setuid and setgid. The result is that LPRng, and its children, maintain any supplemental groups that the process starting...
CVE-1999-0603
CVE-1999-0603 pertains to Windows NT where an inappropriate user is a member of privileged groups (e.g., Administrator, Domain Admins, Backup Operators, etc.). The root cause is improper assignment of users to high-privilege groups, enabling potential escalation of privileges. Documented groups i...
Novell Netware 4.1/4.11 - SP5B NDS Default Rights
source: https://www.securityfocus.com/bid/484/info Non-authenticated clients have access to CX.EXE and NLIST.EXE in the SYS:LOGIN directory of a Netware 4.x server. The default root access is set to Read. Therefore, by using various switch options in CX.EXE and NLIST.EXE, anyone connecting to the...
Novell Netware 4.14.11 - SP5B NDS Default Rights
Novell Netware 4.14.11 - SP5B NDS Default Rights source: https://www.securityfocus.com/bid/484/info Non-authenticated clients have access to CX.EXE and NLIST.EXE in the SYS:LOGIN directory of a Netware 4.x server. The default root access is set to Read. Therefore, by using various switch options ...
PT-1999-1221 · Microsoft · Windows Nt
Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue concerns inappropriate user membership in various groups, including Administrator, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators, Replicators,...
