Unauthenticated Filesystem Access in iomega Home Media Network Hard Drive

----------------------------- Advisory ----------------------------- Unauthenticated File-system Access in iomega Home Media Network Hard Drive ----------------------------- Affected products ----------------------------- iomega Home Media Network Hard Drive Firmware versions 2.038 - 2.061...

Iomega smbwebclient.php Unauthenticated Filesystem Access

The remote host appears to be an Iomega device, perhaps a Home Media Network Hard Drive, a Network-attached storage NAS device intended for the home networks. Its web server hosts an unsecured install of smbwebclient, a PHP- based utility that grants full access to any visible shares on the devic...

Design/Logic Flaw

The installation process for NFS/ONCplus B.11.3108 and earlier on HP HP-UX B.11.31 changes the NFSSERVER setting in the nfsconf file, which might allow remote attackers to obtain filesystem access via NFS requests...

CVE-2010-0451

The installation process for NFS/ONCplus B.11.3108 and earlier on HP HP-UX B.11.31 changes the NFSSERVER setting in the nfsconf file, which might allow remote attackers to obtain filesystem access via NFS requests...

CVE-2010-0451

The CVE-2010-0451 issue affects HP-UX B.11.31 with NFS/ONCplus, where the installation process can set NFS_SERVER to enabled in /etc/rc.config.d/nfsconf, potentially allowing remote attackers to access files via NFS. Public docs identify HP-UX B.11.31_08 or earlier as affected; HP’s Security Bull...

CVE-2010-0451

The installation process for NFS/ONCplus B.11.3108 and earlier on HP HP-UX B.11.31 changes the NFSSERVER setting in the nfsconf file, which might allow remote attackers to obtain filesystem access via NFS requests...

openSUSE Security Update : cifs-mount (cifs-mount-406)

This update fixes a bug that allowed the client to retrieve arbitrary memory content from the server process. CVE-2008-4314 Additionally another bug was fixed that affects environments that enabled registry shares by setting 'registry shares = yes'. In this case an authenticated user is...

CVE-2009-1296

The eCryptfs support utilities ecryptfs-utils 73-0ubuntu6.1 on Ubuntu 9.04 stores the mount passphrase in installation logs, which might allow local users to obtain access to the filesystem by reading the log files from disk. NOTE: the log files are only readable by root...

Samba 3.2.0 - 3.2.6 Unauthorized Access

According to its banner, the version of the Samba server on the remote host is between 3.2.0 and 3.2.6 inclusive. Such versions reportedly allow an authenticated, remote user to gain access to the root filesystem, subject to his or her privileges, by making a request for a share called '' empty...

CVE-2009-0022

CVE-2009-0022 affects Samba 3.2.0–3.2.6 when registry shares are enabled. A crafted remote connection with a blank share name allows an authenticated user to access the root filesystem. The issue is caused by registry-based share definitions enabling unauthorized root FS access. Remediation (as p...

Potential access to "/" in setups with

Description When connecting to a share called "" empty string using an older version of smbclient before 3.0.28 for example with: 'smbclient //server/ -U user%pass' access to the root filesystem is granted with the privileges of the authenticated user. This only happens in setups with registry...

FreeBSD : py-pylons -- Path traversal bug (f5c58fc1-49c0-11dd-b0ba-00163e000016)

Pylons team reports : The error.py controller uses paste.fileapp to serve the static resources to the browser. The default error.py controller uses os.path.join to combine the id from Routes with the media path. Routes prior to 1.8 double unquoted the PATHINFO, resulting in FileApp returning file...

SAP Netweaver 6.40-7.0 Cross-Site-Scripting

Title: SAP Netweaver 6.40-7.0 Persistent Cross-Site-Scripting Author: Jaime Blasco at aitsec.com http://www.aitsec.com Description: SAP Netweaver have a web interface for accesing filesystem of the portal, users can make "feedbacks" of files, input passed to the content of these feedbacks is not...

Dovecot mail_extra_groups setting is often used insecurely

mailextragroups=mail setting is often used insecurely to give Dovecot access to create dotlocks to /var/mail directory. If you don't use mboxes in /var/mail, make sure this setting is cleared. If you do use /var/mail mboxes and Dovecot gives permission errors without it, do one of the following i...

Debian Security Advisory DSA 823-1 (util-linux)

The remote host is missing an update to util-linux announced via advisory DSA 823-1. David Watson discoverd a bug in mount as provided by util-linux and other packages such as loop-aes-utils that allows local users to bypass filesystem access restrictions by re-mounting it read-only. For the old...

Debian: Security Advisory (DSA-823-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-825-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Command injection

DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command. NOTE: the researcher reports a vendor response stating that this is not a security problem...

CVE-2007-6328

DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command. NOTE: the researcher reports a vendor response stating that this is not a security problem...

DEBIAN-CVE-2007-6328

DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command. NOTE: the researcher reports a vendor response stating that this is not a security problem...