Security holes in WoltLab Burning Board

Product : WoltLab Burning Board http://www.woltlab.de Versions : 1.1.0 and less Problems : - XSS - Access to users/admins accounts More details in french : http://www.ifrance.com/kitetoua/tuto/wbboard.txt translated by google : http://translate.google.com/translate?u=http3A...

CVE-2002-0040

Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES environment variable, which might allow the users to gain privileges...

CVE-2002-0113

EMC NetWorker formerly Legato NetWorker before 7.0 stores log files in the /nsr/logs/ directory with world-readable permissions, which allows local users to read sensitive information and possibly gain privileges. NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platfo...

CVE-2002-0120

Apple Palm Desktop 4.0b76 and 4.0b77 creates world-readable backup files and folders when a hotsync is performed, which could allow a local user to obtain sensitive information...

Microsoft Windows - Local Users Information : Can't Change Password

Using the supplied credentials, Nessus was able to list local users who can not change their own passwords. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10912; scriptversion"1.21"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows - Loc...

CVE-2001-1178

Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable...

CVE-2001-1189

IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script...

CVE-2001-1122

CVE-2001-1122 affects Windows NT 4.0 SP 6a. A local user with write access to winnt/system32 can trigger a denial of service (crash of lsass.exe) by running the NT4ALL exploit in ‘SPECIAL’ mode. The issue is described as a local exploit with partial availability impact. The provided documents do ...

CVE-2002-0114

EMC NetWorker formerly Legato NetWorker before 7.0 stores passwords in plaintext in the daemon.log file, which allows local users to gain privileges by reading the password from the file. NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform...

[ARL02-A06] Black Tie Project System Information Path Disclosure Vulnerability

+/--------------- ALPER Research Labs -----/--------/+ +/--------------- Security Advisory ----/---------/+ +/--------------- ID: ARL02-A06 ---/----------/+ +/--------------- [email protected] --/-----------/+ Advisory Information -------------------- Name : Black Tie Project System Information...

Microsoft Windows 'Administrators' Group User List

Using the supplied credentials, it is possible to extract the member list of the 'Administrators' group. Members of this group have complete access to the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10902; scriptversion"1.23"; scriptcvsdate"Date:...

[ARL02-A05] PHP FirstPost System Information Path Disclosure Vulnerability

+/--------------- ALPER Research Labs -----/--------/+ +/--------------- Security Advisory ----/---------/+ +/--------------- ID: ARL02-A05 ---/----------/+ +/--------------- [email protected] --/-----------/+ Advisory Information -------------------- Name : PHP FirstPost System Information Path...

CVE-2001-0371

Race condition in the UFS and EXT2FS file systems in FreeBSD 4.2 and earlier, and possibly other operating systems, makes deleted data available to user processes before it is zeroed out, which allows a local user to access otherwise restricted information...

CVE-2000-0615

LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages to files...

CVE-1999-1146

CVE-1999-1146 : Vulnerability in the Glance and gpm programs of GlancePlus on HP-UX 9.x and earlier allows local users to access arbitrary files and gain privileges. The description does not specify affected versions beyond the HP-UX 9.x and earlier, nor provide explicit remediation steps. No exp...

CVE-2001-0765

CVE-2001-0765 affects BisonFTP V4R1. The vulnerability allows local users to access directories outside their home directory by uploading .bdl files, which can then be linked to other directories. The impact is partial confidentiality, integrity, and availability (per the NVD entry, CVSSv2 base s...

CVE-2001-0373

Technical details about CVE-2001-0373 are not publicly provided in the supplied documents; only the general description is present. Monitor for updates.

CVE-2001-0366

The CVE-2001-0366 issue affects saposcol in SAP R/3 Web Application Server Demo prior to 1.5, where the process trusts the PATH environment variable to locate and execute the expand program. This design allows local users to escalate to root by altering PATH to point to a Trojan horse expand prog...

CVE-2001-0806

Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop when it is created in some languages...

CVE-2001-0371

CVE-2001-0371 describes a race condition in the UFS and EXT2FS file systems affecting FreeBSD 4.2 and earlier (and possibly other operating systems). The vulnerability allows a local user to access data that has already been deleted but not yet zeroed out, leading to exposure of otherwise restric...