CVE-2005-0695

The CVE-2005-0695 issue affects Hosting Controller 6.1 Hotfix 1.7 and earlier, where the forgotpassword.asp password recovery flow can let a remote attacker infer the owner's e-mail address by submitting part of a domain in the login ID field. The underlying vulnerability is described as partial ...

CVE-2005-0695

The password recovery feature forgotpassword.asp in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the owner's e-mail address by providing a portion of the domain name to the "login ID" field...

CVE-2005-0695

The password recovery feature forgotpassword.asp in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the owner's e-mail address by providing a portion of the domain name to the "login ID" field...

CVE-2005-0640

CA Unicenter Asset Management (UAM) 4.0 contains a flaw where the "+Change Credentials for Database" window is not properly initialized, enabling local users to recover the SQL Admin password. The root cause is improper window initialization, per the CVE entry. The documented impact is partial co...

CVE-2005-0366

CVE-2005-0366 concerns OpenPGP/GnuPG where the integrity check feature, when decrypting a message encrypted with CF B mode, can allow a remote attacker to recover part of the plaintext through a chosen-ciphertext attack if the first two bytes of a message block are known and an oracle reveals whe...

CVE-2005-0366

The integrity check feature in OpenPGP, when handling a message that was encrypted using cipher feedback CFB mode, allows remote attackers to recover part of the plaintext via a chosen-ciphertext attack when the first 2 bytes of a message block are known, and an oracle or other mechanism is...

DelphiTurk e-Posta 1.0 - Credential Recover

DelphiTurk e-Posta 1.0 - Credential Recover / DelphiTurk e-Posta v1.0 Local Exploit by Kozan Application: DelphiTurk e-Posta v1.0 Procuder: Delphiturk.com Vulnerable Description: DelphiTurk e-Posta v1.0 discloses passwords to local users. Coded by: Kozan Credits to ATmaCA Web : www.netmagister.co...

DelphiTurk e-Posta 1.0 - Credential Recover

/ DelphiTurk e-Posta v1.0 Local Exploit by Kozan Application: DelphiTurk e-Posta v1.0 Procuder: Delphiturk.com Vulnerable Description: DelphiTurk e-Posta v1.0 discloses passwords to local users. Coded by: Kozan Credits to ATmaCA Web : www.netmagister.com Web2: www.spyinstructors.com Mail:...

CVE-2005-0118

helvis 1.8h21 and earlier stores recovery files in world readable directories with world readable permissions, which allows local users to read the recovered files of other users...

CVE-2005-0119

CVE-2005-0119 affects helvis 1.8h2_1 and earlier, where the setuid elvrec program allows local users to read other users’ files. The FreeBSD vuXML/OpenVAS entries corroborate an information-leak/vector via elvrec/elvprsv, but no specific patched versions or remediation steps are provided in the s...

CVE-2005-0118

CVE-2005-0118 affects helvis 1.8h2_1 and earlier. The vulnerability arises because recovery files are stored in world-readable directories with world-readable permissions, allowing local users to read recovered files of other users. Multiple sources (NVD/CVE, FreeBSD VuXML and OpenVAS entries) co...

CVE-2004-2591

The data-overwrite capability of ButtUglySoftware CleanCache 2.19 does not properly overwrite data in files, which allows attackers to recover the data...

helvis -- information leak vulnerabilities

Once a recovery file has been preserved by the setuid root elvprsv utility it is placed in a worldreadable directory with worldreadable permissions. This possibly allows sensitive information to leak. In addition to this information leak, it is possible for users to recover files that belong to...

UBBCentral UBB.Threads 6.2.x 6.3x - One Char Brute Force

UBBCentral UBB.Threads 6.2.x 6.3x - One Char Brute Force !/usr/bin/perl use LWP::UserAgent; UBB.Threads 6.2. - 6.3. exploit with one char brute technique by 1dt.w0lf // r57 $path = $ARGV0; $username = $ARGV1; $snum = 1; $n=0; $|++; if @ARGV 2 print "Please wait...\r\n"; print ""; while1...

SSH Secure-RPC Weak Encrypted Authentication Key Recovery (deprecated)

Binary data 1976.prm...

Fedora Core 1 : gnupg-1.2.3-2 (2003-025)

Phong Nguyen identified a severe bug in the way GnuPG creates and uses ElGamal keys, when those keys are used both to sign and encrypt data. This vulnerability can be used to trivially recover the private key. While the default behavior of GnuPG when generating keys does not lead to the creation ...

RHEL 2.1 / 3 : gnupg (RHSA-2003:395)

Updated gnupg packages are now available for Red Hat Enterprise Linux. These updates disable the ability to generate ElGamal keys used for both signing and encrypting and disable the ability to use ElGamal public keys for encrypting data. GnuPG is a utility for encrypting data and creating digita...

[Full-Disclosure] Unreal ircd 3.2 clocking subsystem vulnerability

Software name: Unreal ircd Vulnerable versions: 3.2 and probably previous versions Problem nature: Information disclosure Summary: Unreal ircd is a popular irc server. One of the features it provides is called 'ip cloaking'. The purpose of this system is to prevent hostile irc users from getting...

CYSA-0329.txt

Cyrillium Security Advisory CYSA-0329 [email protected] http://www.cyrillium.com/ Cyrillium Security Solutions and Services April 29th, 2004 Severity: High Password Compromise Vendor: SmartStuff Software member of Riverdeep Interactive Learning, Inc. Affected Products: FoolProof Security...

SmartStuff FoolProof Security Program 3.9.x - Administrative Password Recovery

// source: https://www.securityfocus.com/bid/10467/info FoolProof is prone to a vulnerability that may allow an unprivileged user to recover the administrative password for the application. This issue can ultimately allow an attacker to gain unauthorized administrative access to the application...