FreeBSD-SA-00:44.xlock

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:44 Security Advisory FreeBSD, Inc. Topic: xlockmore port allows reading of password file Category: ports Module: xlockmore Announced: 2000-08-28 Credits: bind Affects:...

CVE-2000-0572

The Razor configuration management tool uses weak encryption for its password file, which allows local users to gain privileges...

Flowerfire Sawmill 5.0.21 - Weak Password Encryption

// source: https://www.securityfocus.com/bid/1403/info Sawmill is a site statistics package for Unix, Windows and Mac OS. Passwords are encrypted using a weak hash function. This combined with the file disclosure vulnerability in Sawmill bid = 1402 could allow an attacker to read the contents of...

[COVERT-2000-06] Initialized Data Overflow in Xlock

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Network Associates, Inc. COVERT Labs Security Advisory May 29, 2000 Initialized Data Overflow in Xlock COVERT-2000-06 o Synopsis An implementation vulnerability in xlock allows global variables in the initialized data section of memory to be...

CVE-1999-0554

CVE-1999-0554 concerns NFS exports that may disclose system-critical data to the world. The provided documents consistently describe exposure via NFS shares that can be mounted and read by an attacker, potentially reading (and in some sources possibly writing) sensitive files on the remote host. ...

CVE-1999-0862

The CVE-1999-0862 case relates to insecure directory permissions in the PostgreSQL RPM distribution, enabling local users to gain privileges by reading a plaintext password file. The PT-Security entry notes PostgreSQL (affected versions not specified) and identifies the root cause as insecure RPM...

CVE-1999-0712

A vulnerability in Caldera Open Administration System COAS allows the /etc/shadow password file to be made world-readable...

CVE-2000-0074

PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissions...

PT-2000-1064 · Powerscripts · Powerscripts Plusmail

Name of the Vulnerable Software and Affected Versions: PowerScripts PlusMail affected versions not specified Description: The issue allows remote attackers to execute commands due to improper permissions on a password file. Recommendations: At the moment, there is no information about a newer...

CVE-1999-0862

Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file...

PT-1999-1415 · Postgresql · Postgresql

Name of the Vulnerable Software and Affected Versions: PostgreSQL affected versions not specified Description: The issue is related to insecure directory permissions in the RPM distribution for PostgreSQL, allowing local users to gain privileges. This is achieved by reading a plaintext password...

WWWBoard passwd.txt Authentication Credential Disclosure

The remote host is running WWWBoard, a bulletin board system written by Matt Wright. This board system comes with a password file passwd.txt installed next to the file 'wwwboard.html'. An attacker may obtain the contents of this file and decode the password to modify the remote www board...

CVE-1999-0146

The CVE-1999-0146 entry refers to the campas CGI program shipped with some NCSA httpd servers. The root cause is improper sanitization of user input in the campas CGI, enabling an attacker to execute arbitrary commands via encoded carriage return characters in the query string, demonstrated by re...

PT-1999-1490 · Wwwboard · Wwwboard

Name of the Vulnerable Software and Affected Versions: WWWBoard affected versions not specified Description: The issue concerns the storage of encrypted passwords in a password file located under the web root, making it accessible to remote attackers. Recommendations: At the moment, there is no...

icq99.web.server.txt

Date: Mon, 5 Apr 1999 23:50:56 +0200 From: Jan Vogelgesang To: [email protected] Subject: security hole in ICQ-Webserver Hi, Some days ago i've read a message here in Bugtraq from Ronald A. Jarell about a vulnerability in the ICQ-Webserver . I tried to reproduce this vulnerability with my...

CVE-1999-0712

A vulnerability in Caldera Open Administration System COAS allows the /etc/shadow password file to be made world-readable...

PT-1999-1179 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns inappropriate permissions for system-critical data in an anonymous FTP account. This includes the root directory being writeable by anyone, the ability to obtain ...

PT-1999-1187 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The NFS exports system-critical data to the world, including sensitive directories like the root directory / or a password file. Recommendations: At the moment, there is no information...

Metainfo Sendmail 2.02.5 MetaIP 3.1 - Upload Execute Read Scripts

Metainfo Sendmail 2.02.5 MetaIP 3.1 - Upload Execute Read Scripts source: https://www.securityfocus.com/bid/110/info MetaInfo www.metainfo.com puts out many NT service products, including MetaIP DHCP/DNS manager and Sendmail Unix port. Both products allow remote administration via Web UIs, and...

CVE-1999-0146

The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file...