[SA20127] Sun N1 System Manager Password Disclosure Vulnerability

TITLE: Sun N1 System Manager Password Disclosure Vulnerability SECUNIA ADVISORY ID: SA20127 VERIFY ADVISORY: http://secunia.com/advisories/20127/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: Sun N1 System Manager 1.x...

ClearCase db_loader TERM environment variable buffer overflow vulnerability

--------------------------------------------------------------------------- ClearCase dbloader TERM environment variable buffer overflow vulnerability --------------------------------------------------------------------------- Release infomation ------------------ Found Date: 2001-10-02 Release...

Bug in remote GUI access in CheckPoint Firewall

There is a bug in how the desktop GUI for managing a CheckPoint firewall handles log viewer saves. Regardless of the type of user defined for GUI access, the user can save the file to any directory they wish as well as a few other things. This has been verified from ver. 3.0b through ver. 4.1 SP2...

@stake Advisory: Multiple Vulnerabilities in iCal 2.1 (A100900-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Multiple Vulnerabilities in iCal 2.1 Release Date: 10/09/2000 Application: iPlanet's iCal version 2.1 Patch 2 Platform: Solaris 2.6 Severity: Local attacker can obtain root access Author:...

@stake Advisory: SiteMinder Access Control Bypass (A0911 00-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake Inc. www.atstake.com Security Advisory Advisory Name: SiteMinder Access Control Bypass A091100-1 Release Date: 09/11/2000 Application: Netegrity SiteMinder 3.6, 4.0 Platform: Solaris 2.x, Windows NT Severity: Access control mechanism can be...

Shiva Access Manager 5.0.0 Plaintext LDAP root password.

In testing Intel's Shiva Access Manager RADIUS/Tacacs+ product, i recently came across an important security hole in the LDAP connectivity on the Solaris platform version of this product. When you configure the S.A.M. to store all of it's information in an LDAP directory, it asks that you give it...