6761 matches found
CVE-2002-0377
Gaim 0.57 stores sensitive information in world-readable and group-writable files in the /tmp directory, which allows local users to access MSN web email accounts of other users who run Gaim by reading authentication information from the files...
CVE-2002-0355
netstat in SGI IRIX before 6.5.12 allows local users to determine the existence of files on the system, even if the users do not have the appropriate permissions...
Netscape Enterprise Web Server for Netware 45 5.0 - Information Disclosure
Netscape Enterprise Web Server for Netware 45 5.0 - Information Disclosure source: https://www.securityfocus.com/bid/4874/info It has been reported that Netscape Enterprise Web Server may disclose path and system information to a remote user. Netscape Enterprise Web Server for Netware contain...
Netscape Enterprise Web Server for Netware 4/5 5.0 - Information Disclosure
source: https://www.securityfocus.com/bid/4874/info It has been reported that Netscape Enterprise Web Server may disclose path and system information to a remote user. Netscape Enterprise Web Server for Netware contain several sample files which leak system information, this information can be...
Another vulnerability in hosting controller
1/If admin doesn't change or delete user AdvWebadmin, the default password of this user is advcomm500349, you can creat your own account or use this account to hack the server. 1/ A foolish vulnerability, i can view the harddisk by using the file browse.asp in directory admin...
CVE-2002-0157
Nautilus 1.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the .nautilus-metafile.xml metadata file...
CVE-2002-0214
Compaq Intel PRO/Wireless 2011B LAN USB Device Driver 1.5.16.0 through 1.5.18.0 stores the 128-bit WEP Wired Equivalent Privacy key in plaintext in a registry key with weak permissions, which allows local users to decrypt network traffic by reading the WEP key from the registry key...
CVE-2002-0225
tacplus Tacacs+ daemon F4.0.4.alpha, originally maintained by Cisco, creates files from the accounting directive with world-readable and writable permissions, which allows local users to access and modify sensitive files...
CVE-2002-0225
Tac_plus Tacacs+ daemon F4.0.4.alpha (originally Cisco) is vulnerable because the accounting directive creates files with world-readable and world-writable permissions, allowing local users to access and modify sensitive files. Affected component: tac_plus Tacacs+ daemon; root cause: insecure fil...
CVE-2002-0214
Compaq Intel PRO/Wireless 2011B LAN USB Device Driver 1.5.16.0 through 1.5.18.0 stores the 128-bit WEP Wired Equivalent Privacy key in plaintext in a registry key with weak permissions, which allows local users to decrypt network traffic by reading the WEP key from the registry key...
CVE-2001-1281
Web Messaging Server for Ipswitch IMail 7.04 and earlier allows remote authenticated users to change information for other users by modifying the olduser parameter in the "Change User Information" web form...
CVE-2002-0343
CVE-2002-0343 affects Hotline Client 1.8.5, where passwords and other sensitive user data are stored in plaintext in the bookmarks file. The underlying issue is plaintext storage accessible to local users, enabling privilege escalation by extracting passwords from the bookmarks file. Impact is de...
CVE-2002-0202
PaintBBS 1.2 installs certain files and directories with insecure permissions, which allows local users to 1 obtain the encrypted server password via the world-readable oekakibbs.conf file, or 2 modify the server configuration via the world-writeable /oekaki/ folder...
CVE-2002-0294
Alcatel 4400 installs the /chetc/shutdown command with setgid privileges, which allows many different local users to shut down the system...
CVE-2002-0271
Runtime library in GNU Ada compiler GNAT 3.12p through 3.14p allows local users to modify files of other users via a symlink attack on temporary files...
CVE-2002-0343
Hotline Client 1.8.5 stores sensitive user information, including passwords, in plaintext in the bookmarks file, which could allow local users with access to the bookmarks file to gain privileges by extracting the passwords...
CVE-2001-1258
Horde Internet Messaging Program IMP before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server...
Security holes in 11 products...
adManager : v1.1 Problems : XSS Access to an admin option - MiniBB : v1.2 Problems : XSS Access to admins accounts - Secure - Trackeur - LOGS Problem : Spoofing ---------------More details : -------------- in french : http://www.ifrance.com/kitetoua/tuto/5holes2.txt translated by google :...
CVE-2002-0065
Funk Software Proxy Host 3.x uses weak encryption for the Proxy Host password, which allows local users to gain privileges by recovering the passwords from the PHOST.INI file or the Windows registry...