6894 matches found
NAVCE 7.51 default permission exploit
============================================================ Topic: ===== Default NTFS permissions post-software install allow local user security context to modify "managed" Norton AntiVirus Corporate Edition 7.51 client configuration. Affected: ======== Norton AntiVirus Corporate Edition NAVCE...
CVE-2001-0916
Buffer overflow in Berkeley parallel make pmake 2.1.33 and earlier allows a local user to gain root privileges via a long check argument of a shell definition...
CVE-2001-1415
vi.recover in OpenBSD before 3.1 allows local users to remove arbitrary zero-byte files such as device nodes...
CVE-2001-0715
Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to obtain potentially sensitive information about the mail queue by setting debugging flags to enable debug mode...
Security Update: [CSSA-2001-SCO.26] dtterm argument buffer overflow
To: [email protected] [email protected] [email protected] [email protected] Do not reply to this mail. This security advisory is being sent from a nonexistent address in order to avoid spam problems. Caldera's contact address for UNIX security issue...
PostNuke 0.6 - User Login
PostNuke 0.6 - User Login source: https://www.securityfocus.com/bid/3435/info PostNuke, successor to PHPNuke, is a content management system written in PHP. PostNuke versions 0.62 to 0.64 suffer from a vulnerability that allows a remote user to log-in as any user with known username and ID withou...
CVE-2001-1281
Web Messaging Server for Ipswitch IMail 7.04 and earlier allows remote authenticated users to change information for other users by modifying the olduser parameter in the "Change User Information" web form...
Ipswitch Imail 7.04 vulnerabilities
Hi all, Below are vulnerabilities I have found in Imail Ipswitch.com. Some of them can be very dangerous and it is there for recommended that Imail users upgrade their software asap. After reporting these vulnerabilities to Ipswitch on the 4e of this month it only took 7 days before Ipswitch...
CVE-2001-1098
Cisco PIX firewall manager PFM 4.32g logs the enable password in plaintext in the pfm.log file, which could allow local users to obtain the password by reading the file...
FreeBSD-SA-01:62.uucp
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:62 Security Advisory FreeBSD, Inc. Topic: UUCP allows local root exploit Category: core Module: uucp Announced: 2001-10-08 Credits: [email protected] Affects: All release...
CVE-2001-1255
WinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local users to obtain unathorized access the MySQL database...
Vulnerability in SpoonFTP
-----BEGIN PGP SIGNED MESSAGE----- Vulnerability in SpoonFTP Overview SpoonFTP v1.1 is an ftp server available from http://www.pi-soft.com/. A vulnerability exists which allows a remote user to break out of the ftp root. Details The following excerpt demonstrates the problem; an ftp root of...
CVE-2001-0351
Microsoft Windows 2000 telnet service allows a local user to make a certain system call that allows the user to terminate a Telnet session and cause a denial of service...
lpplus.txt
Multiple Security Holes in LPPlus --------------------------------- echo8, 8/23/2000 Summary ------- LPPlus is Plus Technologies' print management system for unix. Versions prior to v3.3.x have several serious security holes, some of which undermine the integrity of the printing subsystem, some o...
CVE-1999-1135
Vulnerability in VUE 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS4994 and PHSS5438...
CVE-1999-1092
tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inputhistory file...
CVE-1999-1347
Xsession in Red Hat Linux 6.1 and earlier can allow local users with restricted accounts to bypass execution of the .xsession file by starting kde, gnome or anotherlevel from kdm...
CVE-1999-1126
Cisco Resource Manager CRM 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration information including usernames, passwords, and SNMP community strings, from 1 swimswd.log, 2 swimdebug.log, 3 dbidebug.log, and 4 temporary files...
CVE-1999-1345
AutoFTP.pl script in AutoFTP 0.2 uses the /tmp/ftptmp as a shared directory with insecure permissions, which allows local users to 1 send arbitrary files to the remote server by placing them in the directory, and 2 view files that are being transferred...