4111 matches found
CVE-2010-0289
CVE-2010-0289 stems from CSRF flaws in DokuWiki’s ACL Manager plugin (plugins/acl/ajax.php). The vulnerabilities can allow an attacker to hijack an administrator’s session and modify access-control rules via unspecified vectors. Public details point to multiple CVEs in DokuWiki and advise upgradi...
CVE-2010-0288
CVE-2010-0288 affects DokuWiki’s ACL Manager (plugins/acl/ajax.php) where a typo in the administrator permission check can allow remote attackers to escalate privileges and access restricted wikis by editing ACL statements. Details across OpenVAS/DSA entries tie this to DokuWiki prior to the 2009...
CVE-2010-0287
Summary (CVE-2010-0287): A directory-traversal in DokuWiki’s ACL Manager plugin (plugins/acl/ajax.php) allows remote listing of arbitrary directories via a .. in the ns parameter. Affected: DokuWiki prior to the 2009-12-25b release. CVSS-like context from OpenVAS lists base 7.5 (vector AV:N/AC:L/...
CVE-2010-0287
Directory traversal vulnerability in the ACL Manager plugin plugins/acl/ajax.php in DokuWiki before 2009-12-25b allows remote attackers to list the contents of arbitrary directories via a .. dot dot in the ns parameter...
CVE-2010-0289
Multiple cross-site request forgery CSRF vulnerabilities in the ACL Manager plugin plugins/acl/ajax.php in DokuWiki before 2009-12-25c allow remote attackers to hijack the authentication of administrators for requests that modify access control rules, and other unspecified requests, via unknown...
CVE-2010-0288
A typo in the administrator permission check in the ACL Manager plugin plugins/acl/ajax.php in DokuWiki before 2009-12-25b allows remote attackers to gain privileges and access closed wikis by editing current ACL statements, as demonstrated in the wild in January 2010...
CORELAN-10-009 : Ipswitch IMAIL 11.01 multiple vulnerabilities (reversible encryption + weak ACL)
|------------------------------------------------------------------| | | | / / / / | | / / / / / / / / / / / | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | | |------------------------------------------------- EIP Hunters...
Ipswitch IMAIL 11.01 reversible encryption + weak ACL
No description provided by source. |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | |...
[Backports-security-announce] Security Update for dokuwiki
Gerfried Fuchs uploaded new packages for dokuwiki which fixed the following security problems: CVE-2010-0287 It was discovered that an internal variable is not properly sanitized before being used to list directories. This can be exploited to list contents of arbitrary directories. CVE-2010-0288,...
[Backports-security-announce] Security Update for dokuwiki
Gerfried Fuchs uploaded new packages for dokuwiki which fixed the following security problems: CVE-2010-0287 It was discovered that an internal variable is not properly sanitized before being used to list directories. This can be exploited to list contents of arbitrary directories. CVE-2010-0288,...
Ipswitch IMAIL 11.01 reversible encryption + weak ACL
Exploit for unknown platform in category dos / poc ===================================================== Ipswitch IMAIL 11.01 reversible encryption + weak ACL ===================================================== 0x00 : Vulnerability Information + Product : IMail Server + Version : 11.01 + Vendor...
Ipswitch IMAIL 11.01 - Reversible Encryption + weak ACL
Ipswitch IMAIL 11.01 - Reversible Encryption + weak ACL |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 |...
Ipswitch IMAIL 11.01 - Reversible Encryption + weak ACL
|------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | | |-------------------------------------------------...
SuSE 11 Security Update : acl and libacl (SAT Patch Number 1804)
The setfacl tool followed symbolic links in recursive -R mode even if the --physical -P option was specified CVE-2009-4411. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...
openSUSE Security Update : acl (acl-1803)
the setfacl tool followed symbolic links in recursive -R mode even if the --physical -P option was specified CVE-2009-4411. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update acl-1803. The text...
CVE-2003-1575
VERITAS File System VxFS 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1 through 9 does not properly implement inheritance of default ACLs in certain circumstances related to the characteristics of a directory inode, which allows local users to bypass intended file permissio...
CVE-2003-1575
The CVE-2003-1575 entry concerns VERITAS File System (VxFS) versions 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1 through 9. The issue is an incorrect inheritance of default ACLs related to directory inode characteristics, which can allow local users to bypass intended fi...
[SECURITY] [DSA-1976-1] New dokuwiki packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1976-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano January 22, 2010 http://www.debian.org/security/faq -...
[SECURITY] [DSA-1976-1] New dokuwiki packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1976-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano January 22, 2010 http://www.debian.org/security/faq -...
