[oss-security] CVE request: Pyplate multiple vulnerabilities

Hello list, My friend Teemu V. "requested" security audit for Pyplate. While quickly checking quality of this software I noticed following issues. This is not a full security audit as I don't have much free time. Tested version: v0.08 still beta Vendor notification: 2014-05-13 Issue 1. Installati...

Greenstone Password File Disclosure

The Greenstone install listening on the remote host is affected by a password file disclosure vulnerability in the 'cgi-bin/library.cgi' script. A remote attacker could exploit this issue with a specially crafted request to perform a direct request to obtain the credential files. There are,...

MotoCMS 1.3.3 Password File Disclosure / Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Design/Logic Flaw

Opera before 12.12 on UNIX uses weak permissions for the profile directory, which allows local users to obtain sensitive information by reading a 1 cache file, 2 password file, or 3 configuration file, or 4 possibly gain privileges by modifying or overwriting a configuration file...

CVE-2012-4593: Undefined Security Weakness

McAfee Application Control and Change Control 5.1.x and 6.0.0 do not enforce an intended password requirement in certain situations involving attributes of the password file, which allows local users to bypass authentication by executing a command...

DEBIAN-CVE-2012-3292

The GridFTP in Globus Toolkit GT before 5.2.2, when certain autoconf macros are defined, does not properly check the return value from the getpwnamr function, which might allow remote attackers to gain privileges by logging in with a user that does not exist, which causes GridFTP to run as the la...

CVE-2012-3292

The GridFTP in Globus Toolkit GT before 5.2.2, when certain autoconf macros are defined, does not properly check the return value from the getpwnamr function, which might allow remote attackers to gain privileges by logging in with a user that does not exist, which causes GridFTP to run as the la...

AjaXplorer contains multiple vulnerabilities

Overview AjaXplorer 4.0.3 and earlier versions contain a directory traversal vulnerability and a weak cookie authentication scheme. Description AjaXplorer contains a directory traversal vulnerability in the "Get Template" feature. The URL variables templatename and pluginName can be used to explo...

Pika CMS Local File Inclusion

Pika CMS Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail : submitat1337day.com 1 0 0 1 1 0 I'm KnocKout member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 My + Author...

Filer Lite v2.1.0 for iPhone / iPod touch, Directory Traversal

Exploit for hardware platform in category remote exploits Exploit Title: Filer Lite v2.1.0 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: email protected, email protected, Sunlight, email protected Software Link :...

DEBIAN-CVE-2011-0721

Multiple CRLF injection vulnerabilities in 1 chfn and 2 chsh in shadow 1:4.1.4 allow local users to add new users or groups to /etc/passwd via the GECOS field...

Adobe ColdFusion Directory Traversal (APSB10-18; CVE-2010-2861)

Adobe ColdFusion is a rapid application development platform that includes advanced features for enterprise integration and development of rich Internet applications. A directory traversal vulnerability has been reported in Adobe ColdFusion. The vulnerability is due to a design weakness in the...

Adobe ColdFusion 'locale' Parameter Directory Traversal

The version of Adobe ColdFusion running on the remote host is affected by a directory traversal vulnerability in the administrative web interface. Input to the 'locale' parameter of multiple pages is not properly sanitized. A remote, unauthenticated attacker can exploit this by sending specially...

Format string

Format string vulnerability in authcfg.cgi in Accoria Web Server aka Rock Web Server 1.4.7 allows remote attackers to have an unspecified impact via format string specifiers in the path aka Password File parameter...

CVE-2010-2271

Format string vulnerability in authcfg.cgi in Accoria Web Server aka Rock Web Server 1.4.7 allows remote attackers to have an unspecified impact via format string specifiers in the path aka Password File parameter...

Create a UNIX back door for primary articles intermediate articles advanced article-vulnerability warning-the black bar safety net

The primary article The most simple method, is in the password file passwd to add a UID 0 account. But the best don't do it, because as long as the system administrator to check the password file will“drain the filling”. The following is in /etc/passwd password file, add a UID 0 account C Program...

FreeBSD-SA-09:17.freebsd-update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-09:17.freebsd-update Security Advisory The FreeBSD Project Topic: Inappropriate directory permissions in freebsd-update8 Category: core Module: usr.sbin Announced...

CVE-2009-0216

CVE-2009-0216 affects GE Fanuc iFIX 5.0 and earlier. The vulnerability arises from client-side authentication that stores passwords in a locally shared file, using weak encryption, enabling a remote attacker to recover credentials and bypass access controls to start privileged server login sessio...

Design/Logic Flaw

Oracle Database Server 10.1, 10.2, and 11g grants directory WRITE permissions for arbitrary pathnames that are aliased in a CREATE OR REPLACE DIRECTORY statement, which allows remote authenticated users with CREATE ANY DIRECTORY privileges to gain SYSDBA privileges by aliasing the pathname of the...

CVE-2008-6065: Undefined Security Weakness

Oracle Database Server 10.1, 10.2, and 11g grants directory WRITE permissions for arbitrary pathnames that are aliased in a CREATE OR REPLACE DIRECTORY statement, which allows remote authenticated users with CREATE ANY DIRECTORY privileges to gain SYSDBA privileges by aliasing the pathname of the...