5 matches found
CVE-2014-3150: Undefined Security Weakness
Livebox 1.1 allows remote authenticated users to upload arbitrary configuration files, download the configuration file, or obtain sensitive information via crafted Javascript...
CVE-2007-2613
Affected software: WikkaWiki. Vulnerable component: WAKKA_CONFIG environment variable handling in WikkaWiki before 1.1.6.3. Root cause: environment variable tampering allows uploading and executing an arbitrary configuration file in a shared virtual host environment. Impact: arbitrary configurati...
CVE-2007-2613: Undefined Security Weakness
WikkaWiki Wikka Wiki before 1.1.6.3 allows attackers in a shared virtual host server environment to upload and execute an arbitrary configuration file by modifying the WAKKACONFIG environment variable...
CVE-2004-1031
fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to bypass access restrictions and load an arbitrary configuration file by starting an suid process and pointing the fcronsighup configuration file to a /proc entry that is owned by root but modifiable by the user,...
CVE-2004-1031
CVE-2004-1031 affects Fcron (notably 2.0.1 and 2.9.4) and potentially earlier versions. The issue allows a local user to bypass access restrictions and load an arbitrary fcron configuration file by starting a setuid process and pointing the fcronsighup configuration file at a /proc entry owned by...