CVE-1999-1294

Office Shortcut Bar OSB in Windows 3.51 enables backup and restore permissions, which are inherited by programs such as File Manager that are started from the Shortcut Bar, which could allow local users to read folders for which they do not have permission...

CVE-2001-0806

CVE-2001-0806 describes a local vulnerability in Apple MacOS X 10.0 and 10.1 where the Desktop folder can be read and written by a local user due to insecure default permissions when the Desktop is created in certain languages. The issue affects the Desktop path permissions rather than remote acc...

CVE-1999-1317: Undefined Security Weakness

Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the ?? object folder using a different case letter upper or lower to point to a different device...

CVE-2001-0666: Uncontrolled Resource Consumption

Outlook Web Access OWA in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service CPU consumption via a malformed OWA request for a deeply nested folder within the user's mailbox...

CVE-2001-0806: Undefined Security Weakness

Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop when it is created in some languages...

CVE-2001-0837

DeltaThree Pc-To-Phone 3.0.3 places sensitive data in world-readable locations in the installation directory, which allows local users to read the information in 1 temp.html, 2 the log folder, and 3 the PhoneBook folder...

CVE-2001-0806

Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop when it is created in some languages...

Слабые разрешения в MacOSX (weak permissions)

Пользовательская папка Desktop открыта на запись для всех...

CVE-2001-0706

Maximum Rumpus FTP Server 2.0.3 dev and before allows an attacker to cause a denial of service crash via a mkdir command that specifies a large number of sub-folders...

CVE-2001-0243

Windows Media Player 7 and earlier stores Internet shortcuts in a user's Temporary Files folder with a fixed filename instead of in the Internet Explorer cache, which causes the HTML in those shortcuts to run in the Local Computer Zone instead of the Internet Zone, which allows remote attackers t...

Security Vulnerability with Microsoft Index Server 2.0(Sample fil e reveals file info, physical path etc)

Hi I noticed index server sample file is vulnerable which reveals file info and physical path. Vulnerable Microsoft Index Server 2.0 + IIS 4.0 + Windows NT Server 4.0 + Service Pack 6a Details The Index Server Sample file SQLQHit.asp shipped with Microsoft Index Server 2.0 and Option pack 4.0 , i...

CVE-1999-1368: Undefined Security Weakness

AV Option for MS Exchange Server option for InoculateIT 4.53, and possibly other versions, only scans the Inbox folder tree of a Microsoft Exchange server, which could allow viruses to escape detection if a user's rules cause the message to be moved to a different mailbox...

MacOSX 10.0.X Permissions uncorrectly set

Permissions of /Users/yourname/Desktop which show your desktop is xrwxrwxrwx, allowing every user to read/write on your own Desktop folder. Fix: chmod 755 or chmod 750 /Users/yourname/Desktop Apple have been warned long ago and as of 10.0.4 it is stil not fixed. Les moines...

Security-issues with Icecast Version 1.3.7

Digit-Labs Security Advisory http://www.digit-labs.org/ Advisory Name: Security-issues with Icecast Version 1.3.7 Release Date: Application: Tested on Icecast Version 1.3.7 Platform: Windows 2000 Prof Severity: Medium Authors: GoLLuM.no mailto:[email protected] Vendor Status: Unknown Executiv...

SlimServe HTTPd ver. 1.1a Directory Traversal

it is possible to view dir. and download files outside of the wwwroot directory. Exploit: http://127.0.0.1/.../ http://127.0.0.1/.../.../directory/file.xxx Solution: disable folder listings it is enabled by default, which will secure you from viewing dir. outside of the wwwroot dir.But it is stil...

Elm 2.5.3 - Alternative-Folder Buffer Overflow

Elm 2.5.3 - Alternative-Folder Buffer Overflow // source: https://www.securityfocus.com/bid/2403/info There is a buffer overflow in elm 2.5 PL3. This overflow is accessible by passing a long string to the -f Alternative-Folder command-line option. This vulnerability may not be restricted to this...

CVE-2000-0884

Microsoft IIS 4.0 and 5.0 are vulnerable to a directory traversal vulnerability (also known as

Mac OS 9 Multiple Users Control Panel Password Vulnerability

Mac OS 9.04 comes with a 'Multiple Users' Control Panel that allows an administrator called 'Owner' to create user accounts called 'Normal' users with limited access to the computer. The problem is that the Owner password can be removed by a Normal user by moving the 'Users & Groups Data File and...

CVE-2000-0884: Undefined Security Weakness

IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability...

Проблемы в TrendMicro InterScan VirusWall (shared folder permissons)

При установке создается разделяемая папка, содержащая исполняемые файлы доступная всем пользователям на запись/изменение...