John Donoghue Knapster 0.9/1.3.8 File Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1186/info Various open source clones of the Napster software package have a vulnerability by which users may view files on a machine running a vulnerable Napster clone client. The file access is limited to files accessibl...

NewsTraXor Website Management Script 2.9 beta Database Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10194/info Reportedly NewsTraXor is affected by a remote database disclosure vulnerability. This issue is due to a design error that allows the database file to be globally readable. This issue may allow a remote attacker...

MS Windows 2000/NT 4/XP Window Message Subsystem Design Error Vulnerability (3)

No description provided by source. source: http://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based...

Microsoft Active Directory LDAP Server Username Enumeration Weakness

No description provided by source. source: http://www.securityfocus.com/bid/32305/info Microsoft Active Directory is prone to a username-enumeration weakness because of a design error in the application when verifying user-supplied input. Attackers may exploit this weakness to discern valid...

Belchior Foundry VCard 2.8 Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9910/info It has been reported that vCard is prone to a remote authentication bypass vulnerability. This issue is due to a design error that would allow a malicious user access to certain admin functionality without havin...

Tor 0.1.2.15 ControlPort Missing Authentication Unauthorized Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25188/info Tor is prone to an unauthorized-access vulnerability due to a design error when handling multiple connections to the ControlPort. An attacker can exploit this issue to reconfigure Tor and significantly weaken t...

SGI IRIX <= 6.5.28 (runpriv) Design Error Vulnerability

No description provided by source. !/bin/sh Advisory: http://www.idefense.com/intelligence/vulnerabilities/display.php?id=312 /usr/sysadm/bin/runpriv mountfs -s test -d / -o | ksh -c 'echo r00t::0:0:r00t:/tmp:/bin/sh /etc/passwd' su r00t -c chown root:sys /tmp/passwd123 ; mv /tmp/passwd123...

Rixstep Undercover Local Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22071/info Rixstep Undercover is prone to a local privilege-escalation vulnerability because of a design error in the affected application. An attacker can exploit this issue to execute arbitrary code with superuser...

PHPNuke 7.x CAPTCHA Bypass Weakness

No description provided by source. source: http://www.securityfocus.com/bid/16722/info The CAPTCHA implementation of PHPNuke may be bypassed by remote attackers due to a design error. This may be used to carry out other attacks such as brute-force attempts against the login page. ------ real life...

Crysis 1.21 - 'keyexchange' Packet Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29720/info Crysis is prone to an information-disclosure vulnerability caused by a design error. Attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Crysis 1.21 and prior...

PHP 4/5 Input/Output Wrapper Remote Include Function Command Execution Weakness

No description provided by source. source: http://www.securityfocus.com/bid/10427/info PHP is reportedly affected by an arbitrary command-execution weakness through the PHP 'include' function. This issue is due to a design error that allows the execution of attacker-supplied POST PHP commands whe...

Microsoft Windows Vista Windows Mail Local File Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23103/info Microsoft Windows Vista Windows Mail is prone to a local file-execution vulnerability due to a design error. An attackers may exploit this issue to execute local files. The attacker must entice a victim into...

Microsoft Internet Explorer 5.0.1 File Upload Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25836/info Microsoft Internet Explorer is prone to an information-disclosure vulnerability that allows attackers to gain access to the contents of arbitrary files. This issue stems from a design error resulting from the...

bfcommand & control server 1.22/2.0/2.14 manager Multiple Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/14690/info BFCC and BFVCC server managers are vulnerable to multiple remote vulnerabilities. The first two issues are login bypass vulnerabilities. These issues allow remote, anonymous attackers to gain access to the...

ManageEngine Password Manager Pro Build 5401 Database Remote Unauthorized Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23693/info ManageEngine Password Manager Pro is prone to a remote unauthorized-access vulnerability due to a design error. An attacker may leverage this issue to gain unauthorized access to the application's database with...

Xine 0.9.x And Xine-Lib 1 Multiple Remote File Overwrite Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/10193/info It has been reported that the xine media player and the xine media library are affected by multiple remote file overwrite vulnerabilities. This is due to a design error that allows various media resource file...

Wesnoth 1.x PythonAI Remote Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/33971/info Wesnoth is prone to a remote code-execution vulnerability caused by a design error. Attackers can exploit this issue to execute arbitrary Python code in the context of the user running the vulnerable applicatio...

Nortel Contact Center Manager Administration Password Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/34964/info Nortel Contact Center Manager Administration is prone to a password-disclosure vulnerability caused by a design error. Attackers can exploit this issue to gain access to the 'sysadmin' password. Successfully...

openSUSE Security Update : libpng12 (libpng12-4947)

This update of libpng12-0 fixes : - CVE-2011-2501: CVSS v2 Base Score: 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P: Design Error CWE-DesignError - CVE-2011-2690: CVSS v2 Base Score: 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P: Buffer Errors CWE-119 - CVE-2011-2691: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P: Other...

openSUSE Security Update : libpng12 (libpng12-4947)

This update of libpng12-0 fixes : - CVE-2011-2501: CVSS v2 Base Score: 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P: Design Error CWE-DesignError - CVE-2011-2690: CVSS v2 Base Score: 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P: Buffer Errors CWE-119 - CVE-2011-2691: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P: Other...