SuSE 10 Security Update : LUM (ZYPP Patch Number 2274)

A security problem was fixed in 'novell-lum', the eDirectory based 'Linux User Management'. Under certain circumstances it was possible to login to the console without any password. ssh is not affected, since it rejects empty passwords. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The tex...

Promise NAS NS4300N GUI bug

List, There is a bug in the Promise NAS NS4300N web GUI firmware version 1.1.0.5 which allows an authenticated admin user to change the password of the 'root' account. The user management portion of the web interface allows the admin user to change user's passwords. The PHP script that handles th...

promise-root.txt

List, There is a bug in the Promise NAS NS4300N web GUI firmware version 1.1.0.5 which allows an authenticated admin user to change the password of the 'root' account. The user management portion of the web interface allows the admin user to change user's passwords. The PHP script that handles th...

XAMPP for Windows 1.6.3a Local Privilege Escalation Exploit

No description provided by source. =========================================================== XAMPP for Windows 1.6.3a Local Privilege Escalation Exploit =========================================================== ?php //Inphex //htdocs must be accessable and writable,apache must have been ran b...

Authentication flaw

Rule Set Based Access Control RSBAC before 1.3.5 does not properly use the Linux Kernel Crypto API for the Linux kernel 2.6.x, which allows context-dependent attackers to bypass authentication controls via unspecified vectors, possibly involving User Management password hashing and unchecked...

CVE-2007-3945

Rule Set Based Access Control RSBAC before 1.3.5 does not properly use the Linux Kernel Crypto API for the Linux kernel 2.6.x, which allows context-dependent attackers to bypass authentication controls via unspecified vectors, possibly involving User Management password hashing and unchecked...

CVE-2007-3945

CVE-2007-3945 affects Rule Set Based Access Control (RSBAC) versions prior to 1.3.5. The issue stems from improper use of the Linux Kernel Crypto API for Linux kernel 2.6.x, which could allow context-dependent attackers to bypass authentication controls via unspecified vectors (e.g., potential is...

CentOS 3 : shadow-utils (CESA-2007:0431)

An updated shadow-utils package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The shadow-utils package includes the necessary programs for converting UNIX password files to the shadow...

Low: Red Hat Security Advisory: shadow-utils security and bug fix update

An updated shadow-utils package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The shadow-utils package includes the necessary programs for converting UNIX password files to the shadow...

CVE-2006-6922

SQL injection vulnerability in Deadlock User Management System phpdeadlock 0.64 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2006-6922

CVE-2006-6922 describes a SQL injection vulnerability in Deadlock User Management System (phpdeadlock) 0.64 and earlier, allowing remote attackers to execute arbitrary SQL via unspecified vectors. The affected product is the Deadlock User Management System (phpdeadlock); the flaw is in the handli...

CVE-2006-6922

SQL injection vulnerability in Deadlock User Management System phpdeadlock 0.64 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2006-6922: Undefined Security Weakness

SQL injection vulnerability in Deadlock User Management System phpdeadlock 0.64 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

XSS bug: usernames not HTML-encoded in all places

When signing up for an account, it is possible to enter a username like "fred". Confluence will accept this, and on certain pages, render it as raw HTML to the user, opening the possibility of cross-site scripting XSS attacks. Two places I've spotted the raw HTML so far: - Most prominently, when ...

Spooky Login Multiple HTML Injection Vulnerability

This is a user management program where the users can register themselves by providing their username and passwords for protecting their webcontents. This program provide features like remembering login with cookies, automatic login, extended user info, expire user by date, admin can activate...

spooky-sql.txt

This is a user management program where the users can register themselves by providing their username and passwords for protecting their webcontents. This program provide features like remembering login with cookies, automatic login, extended user info, expire user by date, admin can activate...

CVE-2006-6662

Unspecified vulnerability in Linux User Management novell-lum on SUSE Linux Enterprise Desktop 10 and Open Enterprise Server 9, under unspecified conditions, allows local users to log in to the console without a password...

CVE-2006-6662

CVE-2006-6662 describes an unspecified vulnerability in Linux User Management (novell-lum) affecting SUSE Linux Enterprise Desktop 10 and Open Enterprise Server 9. Under unspecified conditions, local users could log in to the console without a password. The connected documents reaffirm the affect...

local Calendar System v1.1 (lcUser.php) Remote File Include

+------------------------------------------------------------------------------------------- local Calendar System v1.1 lcUser.php Remote File Include --------------------------------------------------------------------------------------------- An advanced instrumentation reservation system for...

LoCal Calendar 1.1 (lcUser.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================= LoCal Calendar 1.1 lcUser.php Remote File Include Vulnerability =================================================================...