NetHack, Slash'EM, Falcon's Eye: Local privilege escalation

Background NetHack is the classic single player dungeon exploration game. Slash'EM and Falcon's Eye are NetHack variants. Description NetHack, Slash'EM and Falcon's Eye have been found to be incompatible with the system used for managing games on Gentoo Linux. As a result, they cannot be played...

wu-ftpd SITE EXEC vulnerability

The remote FTP server does not properly sanitize the argument of the SITE EXEC command. SPDX-FileCopyrightText: 2000 A. de Bernis Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

zope -- expose RestructuredText functionality to untrusted users

A Zope Hotfix Alert reports: This hotfix resolves a security issue with docutils. Affected are possibly all Zope instances that expose RestructuredText functionalies to untrusted users through the web...

arc insecure temporary file creation

arc insecure temporary file creation Vendor: http://arc.sourceforge.net/ Advisory: http://www.zataz.net/adviso/arc-09052005.txt Vendor informed: yes Exploit available: yes Impact : low Exploitation : low The vulnerability is caused due to temporary file being created insecurely. The temporary fil...

GLSA-200503-35 : Smarty: Template vulnerability

The remote host is affected by the vulnerability described in GLSA-200503-35 Smarty: Template vulnerability A vulnerability has been discovered within the regexreplace modifier of the Smarty templates when allowing access to untrusted users. Furthermore, it was possible to call functions from if...

Smarty: Template vulnerability

Background Smarty is a template engine for PHP. The "template security" feature of Smarty is designed to help reduce the risk of a system compromise when you have untrusted parties editing templates. Description A vulnerability has been discovered within the regexreplace modifier of the Smarty...

[SA13643] Perl "File::Path::rmtree" Race Condition

TITLE: Perl "File::Path::rmtree" Race Condition SECUNIA ADVISORY ID: SA13643 VERIFY ADVISORY: http://secunia.com/advisories/13643/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Perl 5.x http://secunia.com/product/2647/ DESCRIPTION: Paul Szabo has reported a...

Microsoft Exchange Server 2003 Outlook Web Access Random Mailbox Access Vulnerability

Description A vulnerability has been reported in Exchange Server 2003 with Outlook Web Access OWA configured. Exploitation of this vulnerability could allow an authenticated OWA user to connect to another user's OWA mailbox. Technologies Affected Microsoft Exchange Server 2003 Recommendations Blo...

CVE-2002-0687: Undefined Security Weakness

The "through the web code" capability for Zope 2.0 through 2.5.1 b1 allows untrusted users to shut down the Zope server via certain headers...

CVE-2002-0687

The "through the web code" capability for Zope 2.0 through 2.5.1 b1 allows untrusted users to shut down the Zope server via certain headers...

BSCW 3.44.0 - Insecure Default Installation

BSCW 3.44.0 - Insecure Default Installation source: https://www.securityfocus.com/bid/3777/info BSCW Basic Support for Cooperative Work is a web-based groupware application, allowing users to share a workspace via a web interface. It runs on Microsoft Windows NT/2000 systems, as well as a number ...

BSCW 3.4/4.0 - Insecure Default Installation

source: https://www.securityfocus.com/bid/3777/info BSCW Basic Support for Cooperative Work is a web-based groupware application, allowing users to share a workspace via a web interface. It runs on Microsoft Windows NT/2000 systems, as well as a number of Unix variants. The default installation...