1875 matches found
CVE-2006-5965
PassGo SSO Plus 2.1.0.32, and probably earlier versions, uses insecure permissions Everyone/Full Control for the PassGo Technologies directory, which allows local users to gain privileges by modifying critical programs...
CVE-2006-5965
PassGo SSO Plus 2.1.0.32 (and possibly earlier) is affected by insecure default permissions on the PassGo Technologies directory, granting Everyone/Full Control. Local users can exploit this to modify critical program files and escalate privileges. The issue stems from overly permissive directory...
Passgo SSO Plus本地不安全默认目录权限漏洞
SSO Plus是一个密码管理器。 SSO Plus在安装软件时设置了不安全的访问权限，本地攻击者可能利用此漏洞非授权获取敏感信息。 SSO Plus对PassGo Technologies目录及其所有子目录设置了不安全的权限，允许Everyone组Full Control的权限。本地攻击者可以利用这个漏洞获得对该目录的完全控制。 PassGo SSO Plus 2.1.0.32 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.passgo.com/...
PassGo SSO Plus weak permissions
Weak installation folder permissions...
Secunia Research: PassGo SSO Plus Insecure Default Directory Permissions
====================================================================== Secunia Research 22/11/2006 - PassGo SSO Plus Insecure Default Directory Permissions - ====================================================================== Table of Contents Affected...
FreeBSD : pubcookie-login-server -- XSS vulnerability (855cd9fa-c452-11da-8bff-000ae42e9b93)
"Nathan Dors of the Pubcookie Project reports : Multiple non-persistent XSS vulnerabilities were found in the Pubcookie login server's compiled binary 'index.cgi' CGI program. The CGI program mishandles untrusted data when printing responses to the browser. This makes the program vulnerable to...
FreeBSD : mod_pubcookie -- XSS vulnerability (91afa94c-c452-11da-8bff-000ae42e9b93)
Nathan Dors of the Pubcookie Project reports : Non-persistent XSS vulnerabilities were found in the Pubcookie Apache module modpubcookie and ISAPI filter. These components mishandle untrusted data when printing responses to the browser. This makes them vulnerable to carefully crafted requests...
HP Integrated Lights-Out (iLO) Detection (HTTP)
HTTP based detection of HP Integrated Lights-Out iLO devices. SPDX-FileCopyrightText: 2006 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
pubcookie-login-server -- cross site scripting vulnerability
Nathan Dors of the Pubcookie Project reports: Multiple non-persistent XSS vulnerabilities were found in the Pubcookie login server's compiled binary "index.cgi" CGI program. The CGI program mishandles untrusted data when printing responses to the browser. This makes the program vulnerable to...
Claroline 1.7.2, sso identification vulnerability
hi, this is what we can read in file "/claroline/inc/claroinitlocal.inc.php" : ... $ssoCookieValue = md5 mktime ; $sql = "UPDATE ".$tblsso." SET cookie = '".$ssoCookieValue."', rectime = NOW WHERE userid = ". int $uid; $affectedRowCount = clarosqlqueryaffectedrows$sql; if $affectedRowCount 1 $sql...
CVE-2005-3447
Unspecified vulnerability in Single Sign-On in Oracle Database Server 10g up to 10.1.0.4.2 and Application Server 9.0.2.3 up to 9.0.4.2 has unknown impact and attack vectors, aka Oracle Vuln DB33 and AS08...
Enhance Seraph SSO support to create users automatically
Users of SSO systems generally also have some sort of external user management. As a simple first step, JIRA's SSO authenticator could create an OSUser account in JIRA if the SSO authentication succeeds...
Enhance Seraph SSO support to create users automatically
panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Cloud. Using JIRA Server? See the corresponding suggestion|http://jira.atlassian.com/browse/JRASERVER-4299. panel Users of SSO systems generally also have some sort of external user management. As a simple first step, JIRA's SSO authenticator...
Enhance Seraph SSO support to create users automatically
panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/JRACLOUD-4299. panel Users of SSO systems generally also have some sort of external user management. As a simple first step, JIRA's SSO authenticator...
