A CVS pserver is running

A CVS Concurrent Versions System server is installed, and it is configured to have its own password file, or use that of the system. This service starts as a daemon, listening on port TCP:port. Knowing that a CVS server is present on the system gives attackers additional information about the...

Use SMBCrack to crack the remote-host admin-password-vulnerability warning-the black bar safety net

SMBCrack for stream light 5 development of test prototype, and the conventional SMB shared violent hack tool, not using the system API, but the use of the SMB Protocol. Windows 2 0 0 0 can be in the same session for multiple password probe. Use SMBCrack crack the remote host administrator passwor...

Simple PHP Blog Remote Command Execution

This module combines three separate issues within The Simple PHP Blog use exploit/unix/webapp/sphpblog/fileupload msf undefinedfileupload show actions ...actions... msf undefinedfileupload set ACTION msf undefinedfileupload show options ...show and set options... msf undefinedfileupload run This...

javamailAPI.txt

Javamail Multiple Information Disclosure Vulnerabilities May 25, 2005 Yangon, Myanmar. Vulnerable Systems: JavaMail API 1.3 JavaMail API 1.2 JavaMail API 1.1.3 Tested on Apache Tomcat/5.0.16 Possibly on all versions of Windows Failed to restrict to accessing other directory and files in...

Whisper passwords manager cleartext password

Passwords are visible in cleartext in process memory. Password for password store is not used in ecnryption, allowing to restore passwords from password file...

simplephpBlog040.txt

. || | | .. \ \ | \ | | | | | |\ | | /| | /|/ | || || / Where is the security? ... Security Advisory 2005-0x00 Authors......... pjphem && LazyCrs Date............ 07/07/2005 Vendor.......... www.simplephpblog.com Type............ SimplePHPBlog 0.4.0 = Remote Password Disclosure o The Problem:...

CVE-2005-1733

CVE-2005-1733 affects Cookie Cart: password file passwd.txt is stored under the web document root with insufficient access control, enabling remote retrieval of usernames and encrypted passwords via a direct request. CVSS v2 base score 5.0 (Medium). No exploitation details or fixes are provided i...

CVE-2005-1733

Cookie Cart stores the password file under the web document root with insufficient access control, which allows remote attackers to obtain usernames and encrypted passwords via a direct request to passwd.txt...

CVE-2005-1733

Cookie Cart stores the password file under the web document root with insufficient access control, which allows remote attackers to obtain usernames and encrypted passwords via a direct request to passwd.txt...

HP-UX PHCO_25527 : HP-UX passwd(1), Local Denial of Service (DoS) (HPSBUX00191 SSRT071389 rev.2)

s700800 11.00 libpam and libpamunix cumulative patch : password file corruption using passwd1. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO25527. The text itself is copyright C Hewlett-Packard Developme...

security flaw

lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors...

WWWBoard Password File Disclosure (deprecated)

Binary data 2593.prm...

arkeia.txt

During the testing of arkeia a few security holes has been discovered. Vulnerable System: Arkeia 4.2.x, 5.2.x and 5.3.x Details: 1. Writable directory $ ls -ld /opt/arkeia/server/dbase/ drwxrwxrwx 10 root root 4096 gru 27 13:40 /opt/arkeia/server/dbase/ 2. Default the "root" account password is s...

Arkeia Possible remote root & information leakage

During the testing of arkeia a few security holes has been discovered. Vulnerable System: Arkeia 4.2.x, 5.2.x and 5.3.x Details: 1. Writable directory $ ls -ld /opt/arkeia/server/dbase/ drwxrwxrwx 10 root root 4096 gru 27 13:40 /opt/arkeia/server/dbase/ 2. Default the "root" account password is s...

CUPS < 1.1.23 Multiple Vulnerabilities

According to its banner, the version of CUPS installed on the remote host is between 1.0.4 and 1.1.22 inclusive. Such versions are prone to multiple vulnerabilities : - A remotely exploitable buffer overflow in the 'hpgltops' filter that enable specially crafted HPGL files can execute arbitrary...

CVE-2004-0951

The makerecovery command for the TFTP server in HP Ignite-UX before C.6.2.241 makes a copy of the password file in the TFTP directory tree, which allows remote attackers to obtain sensitive information...

CUPS: Multiple vulnerabilities

Background The Common UNIX Printing System CUPS is a cross-platform print spooler, hpgltops is a CUPS filter handling printing of HPGL files and lppasswd is a program used locally to manage spooler passwords. Description CUPS makes use of vulnerable Xpdf code to handle PDF files CAN-2004-1125...

GLSA-200412-25 : CUPS: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200412-25 CUPS: Multiple vulnerabilities CUPS makes use of vulnerable Xpdf code to handle PDF files CAN-2004-1125. Furthermore, Ariel Berkman discovered a buffer overflow in the ParseCommand function in hpgl-input.c in the hpgltop...

SharePoint information leak

During installation text file with cleartext password is created in world readable folder...

Debian DSA-188-1 : apache-ssl - several vulnerabilities

According to David Wagner, iDEFENSE and the Apache HTTP Server Project, several vulnerabilities have been found in the Apache package, a commonly used webserver. Most of the code is shared between the Apache and Apache-SSL packages, so vulnerabilities are shared as well. These vulnerabilities cou...