MailEnable Enterprise 2.0 - 'ASP' Multiple Vulnerabilities

Hi, I'm Soroush Dalili from GrayHatz Security Group GSG. I found multiple bugs in MailEnable Enterprise Edition ASP Version POSTOFFICE -----------------------End---------------------------- 2 Authenticated normal user can gain ADMIN or SYSADMIN level, also remote user can disable him/her account!...

Dmx Forum <= 2.1a (edit.php) Remote Password Disclosure Exploit

No description provided by source. !/usr/bin/perl by DarkFig -- www.acid-root.new.fr use LWP::Simple; if !$ARGV1 header; print "\n| Usage: url memberid ----------------|"; print "\n+------------------------------------------+"; print "\n| Example: http://localhost/dmx/ 1 ------|"; end; sub header...

CVE-2006-2614: Undefined Security Weakness

Sun N1 System Manager 1.1 for Solaris 10 before patch 121161-01 records system passwords in the world-readable scripts 1 /cr/hdjobsdb.sh, 2 /cr/hdplancheckin.sh, and 3 /cr/oracleplancheckin.sh, which allows local users to obtain System Manager passwords...

Sun N1 System Manager information leak

Password disclosure...

[SA20127] Sun N1 System Manager Password Disclosure Vulnerability

TITLE: Sun N1 System Manager Password Disclosure Vulnerability SECUNIA ADVISORY ID: SA20127 VERIFY ADVISORY: http://secunia.com/advisories/20127/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: Sun N1 System Manager 1.x...

[SA20145] Sybase EAServer JPasswordField Password Disclosure

TITLE: Sybase EAServer JPasswordField Password Disclosure SECUNIA ADVISORY ID: SA20145 VERIFY ADVISORY: http://secunia.com/advisories/20145/ CRITICAL: Not critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: Sybase EAServer 5.x http://secunia.com/product/5398/...

CVE-2006-2020: Undefined Security Weakness

Asterisk Recording Interface ARI in Asterisk@Home before 2.8 stores recordings/includes/main.conf under the web document root with insufficient access control, which allows remote attackers to obtain password information...

CVE-2006-1981

CVE-2006-1981 affects Mac OS X 10.4.5 and involves Java InputMethods. The issue: InputMethods may send input events intended for secure fields to the wrong text field, potentially exposing passwords to onlookers. The available sources do not specify a vendor patch version or explicit remediation ...

CVE-2006-1844

The Debian installer for the 1 shadow 4.0.14 and 2 base-config 2.53.10 packages includes sensitive information in world-readable log files, including preseeded passwords and pppoeconf passwords, which might allow local users to gain privileges...

CVE-2006-1829: Undefined Security Weakness

EAServer Manager in Sybase EAServer 5.2 and 5.3 allows remote authenticated users, possibly guests, to obtain password credentials of arbitrary users via unspecified vectors involving 1 connection caches, 2 open password prompts, and 3 stored custom connection profiles...

CVE-2006-1782: Undefined Security Weakness

Unspecified vulnerability in Solaris 8 and 9 allows local users to obtain the LDAP Directory Server root Distinguished Name rootDN password when a privileged user 1 runs idsconfig; or "insecurely" runs LDAP2 commands with the -w option, including 2 ldapadd, 3 ldapdelete, 4 ldapmodify, 5 ldapmodrd...

TFT Gallery <= 0.10 [Password Disclosure] Remote Exploit

Exploit for unknown platform in category web applications ======================================================== TFT Gallery = 0.10 Password Disclosure Remote Exploit ======================================================== !/usr/bin/perl Copyright C undefined1 This program is free software; yo...

TFT Gallery 0.10 - Password Disclosure

TFT Gallery 0.10 - Password Disclosure !/usr/bin/perl Copyright C undefined1 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or at your option a...

USN-262-1: Ubuntu 5.10 installer password disclosure

Karl Øie discovered that the Ubuntu 5.10 installer failed to clean passwords in the installer log files. Since these files were world-readable, any local user could see the password of the first user account, which has full sudo privileges by default. The updated packages remove the passwords and...

[USN-262-1] Ubuntu 5.10 installer password disclosure

=========================================================== Ubuntu Security Notice USN-262-1 March 12, 2006 Ubuntu 5.10 installer vulnerability https://launchpad.net/bugs/34606 =========================================================== A security issue affects the following Ubuntu releases: Ubun...

Ubuntu Breezy 5.10 Installer Password Disclosure Vulnerability

Exploit for linux platform in category local exploits ============================================================== Ubuntu Breezy 5.10 Installer Password Disclosure Vulnerability ============================================================== !/usr/bin/perl -w use warnings; use strict; Author:...

Ubuntu 5.10 Installer - Password Disclosure

Ubuntu 5.10 Installer - Password Disclosure !/usr/bin/perl -w use warnings; use strict; Author: Kristian Hermansen Date: 3/12/2006 Overview: Ubuntu Breezy stores the installation password in plain text Link: https://launchpad.net/distros/ubuntu/+source/shadow/+bug/34606 print "\n"; print "Kristia...

Ubuntu 5.10 Installer - Password Disclosure

!/usr/bin/perl -w use warnings; use strict; Author: Kristian Hermansen Date: 3/12/2006 Overview: Ubuntu Breezy stores the installation password in plain text Link: https://launchpad.net/distros/ubuntu/+source/shadow/+bug/34606 print "\n"; print "Kristian Hermansen's 'Eazy Breezy' Password Recover...

imlock2006.txt

IM Lock 2006 - Insecure Registry Permission Vulnerability --------------------------------------------------------- Application: IM Lock 2006 Vendor: www.comvigo.com Corporation: Comvigo, Inc. Version: Latest: 2 March 2006 - Home Edition, Enterprise & Professional Description: IM Lock 2006...

IM Lock 2006 - Insecure Registry Permission Vulnerability

IM Lock 2006 - Insecure Registry Permission Vulnerability --------------------------------------------------------- Application: IM Lock 2006 Vendor: www.comvigo.com Corporation: Comvigo, Inc. Version: Latest: 2 March 2006 - Home Edition, Enterprise & Professional Description: IM Lock 2006...