virt-who: plaintext hypervisor passwords in world-readable /etc/sysconfig/virt-who configuration file

It was discovered that the /etc/sysconfig/virt-who configuration file, which may contain hypervisor authentication credentials, was world-readable. A local user could use this flaw to obtain authentication credentials from this file...

Family Connections Who is Chatting Add-On Remote File Inclusion Vulnerability

No description provided by source. ======================================================= Who is Chatting 2.2.3 Remote File Include Vulnerability ======================================================= Author : lumut-- Script Details : http://www.familycms.com/downloads/details.php?file=50 Bugs ...

CVE-2014-0189

virt-who uses world-readable permissions for /etc/sysconfig/virt-who, which allows local users to obtain password for hypervisors by reading the file...

Default credentials

virt-who uses world-readable permissions for /etc/sysconfig/virt-who, which allows local users to obtain password for hypervisors by reading the file...

CVE-2014-0189

virt-who uses world-readable permissions for /etc/sysconfig/virt-who, which allows local users to obtain password for hypervisors by reading the file...

CVE-2014-0189

The CVE-2014-0189 issue affects the virt-who utility, where /etc/sysconfig/virt-who was world-readable, enabling a local attacker to read credentials for hypervisors stored in that file. Publicly available connected sources (Red Hat/CentOS advisories and Nessus/NASL records) confirm the vulnerabi...

PT-2014-1855 · Red Hat +1 · Virt-Who +2

Name of the Vulnerable Software and Affected Versions: virt-who versions 0.10 Description: The issue allows local users to obtain the password for hypervisors by reading the /etc/sysconfig/virt-who file due to world-readable permissions. This can lead to a breach of confidentiality of protected...

SuSE 11.3 Security Update : sudo (SAT Patch Number 9044)

This collective update for sudo provides fixes for the following issues : - Security policy bypass when envreset is disabled. CVE-2014-0106, bnc866503 - Regression in the previous update that causes a segmentation fault when running 'sudo -s'. bnc868444 - Command 'who -m' prints no output when...

CVE-2010-4988

CVE-2010-4988 describes a PHP remote file inclusion vulnerability in Family Connections Who is Chatting 2.2.3, specifically in mod_chatting/themes/default/header.php where TMPL[path] can be controlled to include remote PHP code. The underlying issue enables an attacker to execute arbitrary PHP vi...

DEBIAN-CVE-2011-2943

The ircmsgwho function in msgs.c in the IRC protocol plugin in libpurple 2.8.0 through 2.9.0 in Pidgin before 2.10.0 does not properly validate characters in nicknames, which allows user-assisted remote attackers to cause a denial of service NULL pointer dereference and application crash via a...

CVE-2011-2943

The ircmsgwho function in msgs.c in the IRC protocol plugin in libpurple 2.8.0 through 2.9.0 in Pidgin before 2.10.0 does not properly validate characters in nicknames, which allows user-assisted remote attackers to cause a denial of service NULL pointer dereference and application crash via a...

CVE-2011-2943

The ircmsgwho function in msgs.c in the IRC protocol plugin in libpurple 2.8.0 through 2.9.0 in Pidgin before 2.10.0 does not properly validate characters in nicknames, which allows user-assisted remote attackers to cause a denial of service NULL pointer dereference and application crash via a...

SA-CONTRIB-2010-108 - Who Bought What|Ubercart - Multiple Vulnerabilities

The Who Bought What-module collects and displays relevant information about purchases, including purchaser name, quantity, payment status, and all attributes. The module does not properly sanitize arguments passed via the URL when used in SQL queries, leading to a SQL Injection vulnerability...

CVE-2009-5014

The default quickstart configuration of TurboGears2 aka tg2 before 2.0.2 has a weak cookie salt, which makes it easier for remote attackers to bypass repoze.who authentication via a forged authorization cookie, a related issue to CVE-2010-3852...

Health scares can provide lessons for security

The swine flu outbreak has inspired a flood of comparisons and false analogies to Conficker and other worms, most of which miss the many key differences between the Internet infrastructure and the human population. But there are lessons that security personnel can learn from the ways that health...

TitanFTP Server Denial of Service Vulnerability

This host is running TitanFTP Server and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: gbtitanftpserverdosvuln.nasl 4892 2016-12-30 15:39:07Z teissa $ TitanFTP Server Denial of Service Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone Network...

Command injection

Titan FTP Server 6.26 build 630 allows remote attackers to cause a denial of service CPU consumption via the SITE WHO command...

CVE-2008-6082

Titan FTP Server 6.26 build 630 allows remote attackers to cause a denial of service CPU consumption via the SITE WHO command...

Titan FTP Server < 6.26.631 Remote DoS Vulnerability

Titan FTP Server is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Titan FTP server 6.26 build 630 Remote Denial of Service Exploit

No description provided by source. Titan FTP server v6.26 build 630 remote DoS exploit Titan FTP URL - http://www.titanftp.com/ DoS'ed on "SITE WHO" command xdmnt -- coding: windows-1252 -- import socket import sys def helpinfo: print "Usage: titand0s host login password\n" print "Note: anonymous...