6760 matches found
CGI: Selena Sol's WebBanner ( Random Banner Generator ) Vulnerability
Application Name: WebBanner Random Banner Generator Application Authors: Eric Tachibana Selena Sol and Gunther Birznieks Version: 4.0 Last Modified: 17NOV98 Site: http://www.extropia.com Origin: Script design fault Consequence: User can view files as user the server are running Solution: See at t...
CVE-2000-0534
The apsfilter software in the FreeBSD ports package does not properly read user filter configurations, which allows local users to execute commands as the lpd user...
HP-UX 10.20/11.0 - '.SNMPD' File Permission
source: https://www.securityfocus.com/bid/1327/info A vulnerability exists in the snmpd included with HPUX 11, from Hewlett Packard. The configuration file for the snmpd is world writable. This could allow any user on the system to view and/or alter the settings of the snmp daemon. This in turn...
CVE-2000-0516
When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN Distinguished Name name and password in cleartext in a file that is world readable, which allows local users to compromise the LDAP server...
CVE-1999-0118
AIX infod allows local users to gain root access through an X display...
CVE-1999-0590
A system does not present an appropriate legal message or warning to a user who is accessing it...
PT-2000-1016 · Linux +2 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The system fails to display an appropriate legal message or warning to users when they access it. Recommendations: At the moment, there is no information about a newer version that...
Security Advisory 2000-006
-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2000-006 ================================= Topic: /etc/ftpchroot parsing broken in NetBSD-1.4.2 Version: NetBSD 1.4.2 only Severity: medium to high if using /etc/ftpchroot, none if not. Abstract ======== A fix which attempted to make...
Qpopper EUIDL Arbitrary Command Execution
The remote version of the Qpopper POP server contains a bug that could allow authenticated users who have a pop account to gain a shell with the gid 'mail' by sending to themselves a specially crafted mail. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10423;...
Local DoS : RedHat 6.0
Hello, I'm not sure if this problem has ever been addressed or not, but considering that I just spent a day recovering from a corrupted root partition and this can be done by any user with window manager access, I thought this might be worth mentioning anyway. While killing yet another zombie...
Pacific Software Carello 1.2.1 - File Duplication Source Disclosure
Pacific Software Carello 1.2.1 - File Duplication Source Disclosure source: https://www.securityfocus.com/bid/1245/info A remote user can gain read and write access on a target machine running Carello shopping cart software. First, a user may create a duplicate of a known file in a known director...
BUFFER OVERRUN VULNERABILITIES IN KERBEROS
-----BEGIN PGP SIGNED MESSAGE----- BUFFER OVERRUN VULNERABILITIES IN KERBEROS SUMMARY: Serious buffer overrun vulnerabilities exist in many implementations of Kerberos 4, including implementations included for backwards compatibility in Kerberos 5 implementations. Other less serious buffer overru...
sses-sshauth.txt
Sword & Shield Enterprise Security, Inc. - Security Advisory www.sses.net, Copyright c 2000 Advisory: Secure Shell Authentication Vulnerability Release Date: May 10, 2000 Application: sshd Severity: High - A user local or remote can log into any account with a valid login shell. Status: Affected...
rm.racecondition
Synopsis: If root ever does "rm -rf /tmp/foo" for a directory structure not completely owned by root, a local user can delete all files that root can. Such deletions are common for a /tmp cleanup and b before creating a specific directory in /tmp/. Details: "rm -r" implementations Solaris 7, Gnu...
CVE-2000-0407
Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option...
CVE-2000-0249
The AIX Fast Response Cache Accelerator FRCA allows local users to modify arbitrary files via the configuration capability in the frcactrl program...
CVE-2000-0250
The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords...
CVE-1999-0824
A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the location of folders accessed by later users...