PT-2014-4318

Name of the Vulnerable Software and Affected Versions Requests aka python-requests versions prior to 2.3.0 Description The issue allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request. Recommendations For versions prior to 2.3.0, update to...

UNIX Gather .netrc Credentials

Post Module to obtain credentials saved for FTP and other services in .netrc This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'UNIX Gather .netrc Credentials', 'Description' = %q Post Module to...

Check for rlogin, rsh, rcp tools and configuration

Check for rlogin, rsh, rcp tools and configuration Lists /etc/inetd.conf, /etc/hosts.equiv, /etc/ftpusers, searchs for .rhost, .netrc, rlogind and rshd OpenVAS Vulnerability Test $Id: GSHBSSHr-tools.nasl 7052 2017-09-04 11:50:51Z teissa $ Check for rlogin, rsh, rcp tools and configuration Authors...

Check for rlogin, rsh, rcp tools and configuration

Check for rlogin, rsh, rcp tools and configuration Lists /etc/inetd.conf, /etc/hosts.equiv, /etc/ftpusers, searches for .rhost, .netrc, rlogind and rshd SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Arbitrary File Access

When told to follow a "redirect" automatically, libcurl does not question the new target URL but follows it to any new URL that it understands. As libcurl supports FILE:// URLs, a rogue server can thus "trick" a libcurl-using application to read a local file instead of the remote one. This is a...

CVE-2002-1676: Undefined Security Weakness

BindView NetInventory 1.0, when used with NetRC 1.0, allows local users to read sensitive information passwords by deleting the HOSTCFG.NI file and forcing an audit, which rewrites the HOSTCFG.NI to HOSTCFG.INI and stores the passwords in cleartext until the audit is complete...