PT-2005-4231 · Archilles · Archilles Newsworld

Name of the Vulnerable Software and Affected Versions: Archilles Newsworld versions up to 1.3.0 Description: The issue allows attackers to bypass authentication by obtaining the password hash for another user and specifying the hash in the pwd argument. This can be achieved, for example, through...

CVE-2004-2388

The vulnerability CVE-2004-2388 affects the AIX 4.3.3 rexecd component. It stems from not properly using a local copy of the pwd structure when calling getpwnam, allowing the authenticate function to overwrite the pwd data and potentially assign privileges to the wrong user. This creates a privil...

CVE-2004-2101: Undefined Security Weakness

The sysinfo script in GeoHttpServer allows remote attackers to cause a denial of service crash via a long pwd parameter, possibly triggering a buffer overflow...

CVE-2005-0746

The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the server via the PWD command...

CVE-2005-0746: Undefined Security Weakness

The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the server via the PWD command...

CVE-2004-2388

rexecd for AIX 4.3.3 does not properly use a local copy of the pwd structure when calling getpwnam, which may cause the structure to be overwritten by the authenticate function and assign privileges to the wrong user...

CVE-2003-1319

Multiple buffer overflows in SmartFTP 1.0.973, and other versions before 1.0.976, allow remote attackers to execute arbitrary code via 1 a long response to a PWD command, which triggers a stack-based overflow, and 2 a long line in a response to a file LIST command, which triggers a heap-based...

CVE-2002-1545: Undefined Security Weakness

CooolSoft Personal FTP Server 2.24 allows remote attackers to obtain the absolute pathname of the FTP root via a PWD command, which includes the full path in the response...

CVE-2001-0934

Cooolsoft PowerFTP Server 2.03 allows remote attackers to obtain the physical path of the server root via the pwd command, which lists the full pathname...

CVE-2001-0934: Undefined Security Weakness

Cooolsoft PowerFTP Server 2.03 allows remote attackers to obtain the physical path of the server root via the pwd command, which lists the full pathname...

CVE-2001-0254: Undefined Security Weakness

FaSTream FTP++ Server 2.0 allows remote attackers to obtain the real pathname of the server via the "pwd" command...

CVE-2000-1142: Undefined Security Weakness

Recourse ManTrap 1.6 generates an error when an attacker cd's to /proc/self/cwd and executes the pwd command, which allows attackers to determine that they are in a honeypot system...

CVE-2000-0994

Format string vulnerability in OpenBSD fstat program and possibly other BSD-based operating systems allows local users to gain root privileges via the PWD environmental variable...

CVE-2000-0994: Undefined Security Weakness

Format string vulnerability in OpenBSD fstat program and possibly other BSD-based operating systems allows local users to gain root privileges via the PWD environmental variable...