CVE-2011-1098

Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before the intended permissions are in place...

CVE-2011-0017

The openlog function in log.c in Exim 4.72 and earlier does not check the return value from 1 setuid or 2 setgid system calls, which allows local users to append log data to arbitrary files via a symlink attack...

CVE-2011-0017

The openlog function in log.c in Exim 4.72 and earlier does not check the return value from 1 setuid or 2 setgid system calls, which allows local users to append log data to arbitrary files via a symlink attack...

CVE-2009-4465

DeluxeBB 1.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain user and configuration information, log data, and gain administrative access via a direct request to scripts in 1 templates/ including 2 templates/deluxe/admincp/...

Authentication flaw

The scheduler in CUPS in Apple Mac OS X 10.5 before 10.5.3, when debug logging is enabled and a printer requires a password, allows attackers to obtain sensitive information credentials by reading the log data, related to "authentication environment variables."...

DEBIAN-CVE-2008-1033

The scheduler in CUPS in Apple Mac OS X 10.5 before 10.5.3, when debug logging is enabled and a printer requires a password, allows attackers to obtain sensitive information credentials by reading the log data, related to "authentication environment variables."...

openSUSE 10 Security Update : sarg (sarg-5074)

This update of sarg fix a buffer overflow that can occur while handling untrusted log data. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update sarg-5074. The text description of this plugin is C...

PT-2007-6745 · Retina X Studios · Mobile Spy

Name of the Vulnerable Software and Affected Versions: Mobile Spy affected versions not specified Description: The issue concerns the storage and transmission of sensitive information. Specifically, it involves storing login credentials in cleartext under a specific registry key and sending login...

CA Host-Based Intrusion Prevention System Server Log Data XSS

The remote host is running Computer Associates' Host-Based Intrusion Prevention System CA HIPS Server, an intrusion prevention system for Windows. The version of CA HIPS Server installed on the remote Windows server is reportedly affected by a cross-site scripting issue because it fails to saniti...

CVE-2006-6753

Event Viewer eventvwr.exe in Microsoft Windows does not properly display log data that contains '%' percent characters, which might make it impossible to use Event Viewer to determine the actual data that triggered an event, and might produce long strings that are not properly handled by certain...

CVE-2006-6753

Event Viewer (eventvwr.exe) in Microsoft Windows is affected by a parsing issue when log data contains '%' characters. The vulnerability, as described in the CVE-2006-6753 entry, states that logs with '%' may not be displayed correctly, potentially preventing users from determining the actual dat...

CVE-2006-6753

Event Viewer eventvwr.exe in Microsoft Windows does not properly display log data that contains '%' percent characters, which might make it impossible to use Event Viewer to determine the actual data that triggered an event, and might produce long strings that are not properly handled by certain...