479 matches found
Moderate: Red Hat Security Advisory: util-linux security update
The util-linux package shipped with Red Hat Linux Advanced Server contains a locally exploitable vulnerability. The util-linux package contains a large variety of low-level system utilities that are necessary for a Linux system to function. The 'chfn' utility included in this package allows users...
Moderate: Red Hat Security Advisory: : : : Updated util-linux package fixes password locking race
A locally exploitable vulnerability is present in the util-linux package which shipped with Red Hat Linux. Updated 8 July 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems. The util-linux package contains a large variety of low-level system utilities that are necessary for ...
CVE-2002-0577
Vulnerability in passwd for HP-UX 11.00 and 11.11 allows local users to corrupt the password file and cause a denial of service...
CVE-2002-0577
Vulnerability in passwd for HP-UX 11.00 and 11.11 allows local users to corrupt the password file and cause a denial of service...
CVE-2002-0577
HP-UX 11.00 and 11.11 systems are affected by a vulnerability in the passwd(1) utility that may allow a local attacker to corrupt the password file, potentially causing a denial of service. The issue affects the passwd component on HP-UX; HP documents a list of patches to mitigate (PHCO_25527 for...
Abyss Webserver 1.0 Administration password file retrieval exploit
Abyss Web Server was just released April 3rd . The Web Server is vulnerable to retrieving the password file on the host's computer. An attacker can send a request to get the password file just by breaking WWWROOT using Unicode. heres a report i wrote NETCRA$H SECURITY REPORT Abyss Web Server 1.0...
Доступ к паролю в IBM WebSphere (unauthorized access)
JSP-приложения запускаются с привилегиями root что дает доступ к файлу, содержащиму пароль администрирования...
CVE-1999-1405
CVE-1999-1405 : In AIX prior to 4.3.2, the snap command creates the /tmp/ibmsupt directory with world-readable permissions and does not remove/clear it when snap -a runs. This could allow a local user to access the shadowed password file by pre-creating /tmp/ibmsupt/general/passwd before root exe...
CVE-1999-1405
snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which could allow local users to access the shadowed password file by creating /tmp/ibmsupt/general/passwd before root runs snap...
Possible Issue with Netinfo and Mac OS X
Hi, I have been using Mac OS X for quite a while now, and I have just found something that concerns me a little. As you probably know Mac OS X is based on BSD and by default does not have any services running though it is not hard to turn these on thefore is reasonably secure out of the box. Now ...
Большая дырка в ssh (unauthorized access)
Если в файле паролей запись о пароле пользователя состоит из двух символов или менее это часто применяется для слудебных щаписей не относящихся к пользователям то ssh позволяет войти с такой записью без пароля...
Interactive story 1.3 - Directory Traversal
Interactive story 1.3 - Directory Traversal source: https://www.securityfocus.com/bid/3028/info Interactive Story is a web-based application written in Perl and is distributed as freeware. Interactive Story does not filter '../' sequences from user input submitted to a hidden file called 'next'...
DCForum Password File Manipukation Vulnerability (qDefense Advisory Number QDAV-5-2000-2)
DCForum Password File Manipulation Vulnerability qDefense Advisory Number QDAV-5-2000-2 Product: DCForum Vendor: D.C. Script Version Tested: DCForum 2000 1.0 Version 6.0 is believed to be vulnerable as well Severity: Remote; Any attacker may gain DCForum admin privileges, which result in...
OpenServer 5.0.55.0.6 HP-UX 1011 Solaris 2.67.08 - rpc.yppasswdd Buffer Overrun
OpenServer 5.0.55.0.6 HP-UX 1011 Solaris 2.67.08 - rpc.yppasswdd Buffer Overrun source: https://www.securityfocus.com/bid/2763/info The rpc.yppasswdd server is used to handle password change requests from yppasswd and modify the NIS password file. A buffer overrun vulnerability has been discovere...
Ikonboard v2.1.7b "show files" vulnerability
Product: Ikonboard - Version: 2.1.7b - OS: Unix, NT - Vendor: Notified, http://www.ikonboard.com -= Summary =- This is another bug in the Ikonboard. Anyone can read any file on the remote system with the privileges of the web server. -= Problem =- File: help.cgi ---L.44--- $inhelpon = $query -...
web_store-cgi.txt
Exploit: http://example.com/cgi-bin/Webstore/webstore.cgi?page=../../../../. ./../../../etc/passwd%00.html...
Большая дырка в xlock
Перполнение буфера в сегменте данных позволяет получить доступ к данным из файла скрытых паролей...
CIMcheck2.pl
! c:\perl\bin\perl.exe CIMcheck 1.2 - Compaq Insight Manager Exploit Checker By Neon-Lenz ------------------------------------------------------------------ Yea i know this little script is very easy to code and lame, but what the hell. This should do the job. Assuming i'm still learning Perl...
FreeBSD-SA-00:44.xlock
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:44 Security Advisory FreeBSD, Inc. Topic: xlockmore port allows reading of password file Category: ports Module: xlockmore Announced: 2000-08-28 Credits: bind Affects:...