Linux Kernel 2.2.x/2.4.x - '/proc' Filesystem Information Disclosure

/ source: https://www.securityfocus.com/bid/8002/info A potential information disclosure vulnerability has been reported for the Linux /proc filesystem, specifically when invoking setuid applications. As a result, an unprivileged user may be able to read the contents of a setuid application's...

Linux Kernel IP Stack ICMP Error Response Arbitrary Memory Information Disclosure

The remote host is vulnerable to an 'icmp leak' of potentially confidential data. That is, when the host generates an ICMP error packet other than 'destination unreachable', the error packet is supposed to only contain the original message or a portion of the original message. Due to a bug in the...

Xpressions Software: Multiple SQL Injection Attacks To Manage WebStore

/------------------------ Pimp industries. --------------------------/ Xpressions Software : Multiple SQL Injection Attacks To Manage WebStores. BackGround ------------- When your suppliers and trading partners can interact with your organization as a seamless extension of your internal business...

Memory leak in 3COM 812 DSL routers

Issue : Memory leak in 3COM DSL routers Affected product : OfficeConnect Remote 812 ADSL Router Affected Firware : 1.1.7 Inmune firwamre : 1.1.9 Description : 3Com develops OfficeConnect 812 DSL routers that are widely used in Spanish ADSL lines . There is a flaw in the 1.1.7 firmware that enable...

Oracle E-Business Suite RRA/FNDFS Arbitrary File Disclosure Vulnerability

Description Oracle E-Business suite RRA/FNDFS server has been reported prone to an arbitrary file disclosure vulnerability. The Oracle FNDFS server is used in usual circumstances, by Oracle utilities, to retrieve and extract report data from Concurrent Manager server. It has been reported that...

Sambar Server 5.x - Information Disclosure

Sambar Server 5.x - Information Disclosure source: https://www.securityfocus.com/bid/7207/info An information disclosure vulnerability has been reported for Sambar Server. The vulnerability exists in some files existing in Sambar Server's cgi-bin directory. An attacker can exploit this...

PHPBB2 - Page_Header.php SQL Injection

PHPBB2 - PageHeader.php SQL Injection source: https://www.securityfocus.com/bid/6888/info A SQL injection vulnerability has been reported in phpBB2. phpBB2, in some cases, does not sufficiently sanitize user-supplied input which is used when constructing SQL queries. As a result, attackers may...

CVE-2002-1970

SnortCenter 0.9.5, when configured to push Snort rules, stores the rules in a temporary file with world-readable and world-writable permissions, which allows local users to obtain usernames and passwords for the alert database servers...

Microsoft Word and Excel documents allow local file reading by via embedded fields

Overview Microsoft Word and Excel contain special encoding tags for formatting and updating content. An attacker may be able to use these tags to exploit an information disclosure vulnerability. Description Microsoft Word and Microsoft Excel are applications that ship as part of the Microsoft...

phptonuke allows Remote File Retrieving

The file "phptonuke.php" from myphpnuke allows Remote File Retrieving. Exploit Example: http://website.com/phptonuke.php?filnavn=/etc/passwd Zero X, member of www.Lobnan.de -- Get your free email from www.linuxmail.org Powered by Outblaze...

Shana Informed 3.05 information disclosure

Shana Informed v3.05 stores random data in clear text http://www.cirt.net/advisories/shana.shtml Product Description: Shana Corporation provides eForm solutions and is the developer of Informed. Their solution is used by more than two million people around the world. Shana's Informed has been...

CVE-2002-0568

Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sensitive information including usernames and passwords by requesting 1 XSQLConfig.xml or 2 soapConfig.xml through a virtual directory...

CVE-2001-0884

Cross-site scripting vulnerability in Mailman email archiver before 2.08 allows attackers to obtain sensitive information or authentication credentials via a malicious link that is accessed by other web users...

Microsoft ASP.NET Application Tracing trace.axd Information Disclosure

The ASP.NET web application running in the root directory of the remote web server has application tracing enabled. This allows an unauthenticated, remote attacker to view the last 50 web requests made to the server, including sensitive information like Session ID values and the physical path to...

Microsoft IIS 4.0/5.0 - HTTP Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/4486/info A Cross Site Scripting issue exists in some versions of IIS. The HTTP Error Page created by IIS may, under some circumstances, contain HTML content which includes unsanitized user supplied input. An attacker may construct a link to a vulnerable...

Microsoft IIS 4.05.0 - HTTP Error Page Cross-Site Scripting

Microsoft IIS 4.05.0 - HTTP Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/4486/info A Cross Site Scripting issue exists in some versions of IIS. The HTTP Error Page created by IIS may, under some circumstances, contain HTML content which includes unsanitized user...

MiraMail 1.04 can give POP account access and details

Released: January 9, 2002 Discovered: January 3, 2002 by Chris Lathem [email protected] Program Overview: MiraMail is a fairly new program to the market, and is intended to be used as a news server. It is developed and maintained by Nevrona Designs. For more information please see...

PowerFTP-server-Bugs&Exploits-Remotes

------oOo------ PowerFTP Server data revealing sensitive on DRIVES remotes and Denial of Service Vulnerability Released exploits Codes. ------oOo------ PowerFTPServer for Windows 9x/NT/2000 contains remote vulnerabilities which allow users to see and retrieve any file on the server. Exploit...

RADIX1112200102

Team RADIX Research Report: RADIX1112200102 Date Published: 11-12-2001 Research Report ID: RADIX1112200102 Bugtraq ID: 3184 CVE CAN: N/A Title: RunAs Sensitive Data Exposure Class: Sensitive data exposure Remotely Exploitable: No Locally Exploitable: Yes Vulnerability Description: The command lin...

Pc-to-Phone vulnerability - broken by design

Dear Sirs, This is to report a security vulnerability in DeltaThree's Pc-To-Phone product, version 3.0.3 latest version, and possibly earlier versions. This security flaw was first reported to DeltaThree/iConnectHere on October 3, 2001, where I told the company about the security flaw, how it cou...