4352 matches found
SudoEdit 1.6.8 Local Change Permission Exploit
Exploit for linux platform in category local exploits ============================================== SudoEdit 1.6.8 Local Change Permission Exploit ============================================== / Copyright ? Rosiello Security 2004 http://www.rosiello.org sudoedit Exploit SOFTWARE : sudoedit...
security flaw
Directory traversal vulnerability in the sanitizepath function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files...
DSA-358 linux-kernel-2.4.18 - several vulnerabilities
Bulletin has no description...
CVE-2003-0476: Undefined Security Weakness
The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the calling process, which allows local users to gain read access to restricted file descriptors...
Security issues in D-Link DSL-300/DSL-300G+ Broadband Modem/Router
Arhont Ltd - Information Security Company Arhont Advisory by: Andrei Mikhailovsky www.arhont.com Advisory: D-Link DSL Broadband Modem/Router Router Model Name: D-Link DSL-300G/DSL-300G+ Model Specific: Other models might be vulnerable as well Manufacturer site: http://www.dlink.com Manufacturer...
ypxfrd daemon fails to properly validate user supplied arguments in "getdbm" procedure
Overview A vulnerability in the ypxfrd daemon may allow a local attacker to read arbitrary files on the vulnerable system. Description Janusz Niewiadomski, of iSEC, discovered this vulnerability and produced the following advisory.Issue: ====== Improper arguments validation in ypxfrd may allow...
CVE-2002-0051
Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access...
CVE-2002-0051: Improper Locking
Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access...
My Postcards 6.0 - 'MagicCard.cgi' Arbitrary File Disclosure
source: https://www.securityfocus.com/bid/5029/info My Postcards is a commercial available eletronic postcard system. It is available for Unix and Linux Operating Systems. The magiccard.cgi script does not properly handle some types of input. As a result, it may be possible for a remote user to...
Security Bulletin MS02-016 Q318593: Opening Group Policy Files for Exclusive Read Blocks Policy Application
-----BEGIN PGP SIGNED MESSAGE----- Title: Q318593: Opening Group Policy Files for Exclusive Read Blocks Policy Application Date: 04 April 2002 Software: Microsoft Windows 2000 Server Microsoft Windows 2000 Advanced Server Microsoft Windows 2000 Datacenter Server Impact: Attacker could block...
CVE-2002-0051
Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access...
PT-2002-1143 · Microsoft · Windows 2000
Name of the Vulnerable Software and Affected Versions: Windows 2000 Description: The issue allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access. Recommendations: For Windows 2000, consider restricting access to Group...
Directory traversal in PCI NetSupport Manager
Directory traversal in web manager allows read access to whole disk content...
Eserv 2.97 Password Protected File Arbitrary Read Access Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Eserv 2.97 Password Protected File Arbitrary Read Access Vulnerability Type: File Disclosure Release Date: January 10, 2002 Product / Vendor: Eserv Mail, News, Web, FTP and Proxy Servers for Win95/98/NT/2000 http://www.eserv.ru Summary: The...
ACLogic CesarFTP 0.98b - Directory Traversal
source: https://www.securityfocus.com/bid/2786/info CesarFTP is a freely available FTP Server for Microsoft Windows 9x/ME systems. CesarFTP on Windows 98/Me platforms contains a 'directory traversal' vulnerability. If a user requests to change directories to "..." from within a mapped directory,...
jarle aase war ftpd 1.67 b04 - Directory Traversal
jarle aase war ftpd 1.67 b04 - Directory Traversal source: https://www.securityfocus.com/bid/2444/info A remote user could gain read access to directories outside of the ftp root in a Jarle Aase War FTPD Server. Once a user is logged into the server, a specially crafted 'dir' command will disclos...
sendtemp.pl Read Access to Files
Exploit for cgi platform in category web applications ================================ sendtemp.pl Read Access to Files ================================ !/usr/bin/perl -w sendtemp.pl: A part of the Amaya Web development server contains a file disclosure vulnerability, which allows remote, read...
itafrica webactive 1.0 - Directory Traversal
itafrica webactive 1.0 - Directory Traversal source: https://www.securityfocus.com/bid/2386/info It is possible for a remote user to gain read access to directories and files outside the root directory of ITAfrica WEBactive. Requesting a specially crafted URL composed of '../' sequences will...