1542 matches found
websitepro.txt
Sender: Bugtraq List From: Crono Subject: WebServer Pro 2.3.7 Vulnerability To: [email protected] -- WebSite Pro 2.3.7 Vulnerability -- WebSite Pro is a Web Server for Win95/98/NT plataforms. The vulnerability or bad server administration allow any user to create arbitrary files with...
Infosec.20000712.worldclient.2.1
Infosec Security Vulnerability Report No: Infosec.20000712.worldclient.2.1 Vulnerability Summary --------------------- Problem: The web server for remote access to e-mail in WorldClient 2.1 is vulnerable for root dot dot. It is possible to read and in some cases download any file known by name an...
Дырка в Sawmill
Специальным образом сконструированный GET-запрос позволяет прочитать первую строчку любого файла, причем приложение запускается от root...
glftpd.privpath.txt
Glftpd 1.18 till 1.21b8 current beta have a serious problem with the privpath directives.... It will probably be fixed in the comming 1.21b9 but i have included a quick fix in this one to prevent exploits of this bug. Thanx for Hoopy for the quick fix glftpd dev team. Problem: When you know the...
Дырка в ftpchroot в NetBSD
Неправильный разбор /etc/ftpchroot приводит к тому, что пользователь может попасть в директории за пределами домашнего каталога...
CVE-2000-0462
ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which allows those users to access other files outside of their home directory...
CVE-2000-0355
pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary files...
John Donoghue Knapster 0.9/1.3.8 - File Access
source: https://www.securityfocus.com/bid/1186/info Various open source clones of the Napster software package have a vulnerability by which users may view files on a machine running a vulnerable Napster clone client. The file access is limited to files accessible by the user running the client...
Check Point Software Firewall-1 3.01 4.0 Cisco PIX Firewall 4.x5.x - ALG Client
Check Point Software Firewall-1 3.01 4.0 Cisco PIX Firewall 4.x5.x - ALG Client // source: https://www.securityfocus.com/bid/1045/info A vulnerability exists in the handling of certain rules on many firewalls, that may allow users outside of the firewall to gain limited access to areas behind...
Sun Workshop 5.0 - Licensing Manager Symlink
source: https://www.securityfocus.com/bid/998/info A vulnerability exists in the installation of licenses for Sun's WorkShop 5.0 compilers, and other Sun products which use the FlexLM license management system. As part of the installation process, the 'lit' program is run. This program insecurely...
CVE-1999-1346
PAM configuration file for rlogin in Red Hat Linux 6.1 and earlier includes a less restrictive rule before a more restrictive one, which allows users to access the host via rlogin even if rlogin has been explicitly disabled using the /etc/nologin file...
CVE-1999-0475
A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail...
CVE-1999-0185
In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution...
CVE-1999-0777
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions...
bigfoot-bellsouth-webmail.txt
Date: Fri, 8 Jan 1999 07:07:20 -0600 From: "Madere, Russel" To: [email protected] Subject: Bigfoot/Bellsouth Webmail bug I seem to have found another "bug" with the Bigfoot/Bellsouth Webmail. Users can log back into the service from cached pages. This is a huge security hole, especially for...
openbsdreadv.txt
Date: Mon, 27 Jul 1998 12:26:36 +0100 BST From: [email protected] To: [email protected] X-Send-Pr-Version: 3.97 Subject: kernel/549: Any user can panic OpenBSD machine Sender: [email protected] Number: 549 Category: kernel Synopsis: readv with -ve block size panics kernel Confidential: yes...
ichat3.txt
Date: Wed, 9 Sep 1998 16:19:28 -0700 From: Jon Beaton Subject: bug in iChat 3.0 maybe others Hi, The iChat http://www.ichat.com/ ROOMS server runs as 'nobody', and on port 4080 as default. From what I've noticed, it just uses http, and has a bug which lets following /../../../ be ran on the URL...
NetBSD 1.3.2 / SGI IRIX 6.5.1 - 'at(1)' Read File
source: https://www.securityfocus.com/bid/331/info A vulnerability exists in NetBSD version 1.3.2 and lower, and Silicon Graphics Inc's IRIX versions 6.2, 6.3, 6.4, 6.5 and 6.5.1. The at1 program can be supplied with a -f flag, and an error is access validation can result in the mailing of portio...
[SECURITY] New versions of super fixes security problem
==================================================================== Debian GNU/Linux Security May 08, 1998 We have received a report that versions super were displaying files even if the particular user should not be able to read them. This has been forwarded to the upstream author, William Deic...