CVE-2001-1556

Technical details for CVE-2001-1556 are not publicly provided in the connected documents. Monitor for updates.

CVE-2002-2001

jmcce 1.3.8 in Mandrake 8.1 creates log files in /tmp with predictable names, which allows local users to overwrite arbitrary files via a symlink attack...

CVE-2001-1550

CentraOne 5.2 and Centra ASP with basic authentication enabled creates world-writable base64 encoded log files, which allows local users to obtain cleartext passwords from decoded log files and impersonate users...

CVE-2001-1550

CVE-2001-1550 affects CentraOne 5.2 and Centra ASP when using basic authentication. The Centra Smart Connect patch CEN5.2-03 reportedly stores sensitive information in log files that are world-writable, and these log files contain a base64-encoded username and password in plaintext. A local attac...

CVE-2002-1694

The CVE refers to Microsoft Internet Information Server (IIS) 4.0 where log files are opened with FILE_SHARE_READ and FILE_SHARE_WRITE permissions. This shared access could allow remote attackers to modify log file contents while IIS is running, representing a potential integrity impact on logs. ...

CVE-2002-1695

Norton Internet Security 2001 opens log files with FILESHAREREAD and FILESHAREWRITE permissions, which could allow remote attackers to modify the log file contents while Norton Internet Security is running...

CVE-2005-1969

Cross-site scripting XSS vulnerability in Pragma Systems Telnetserver 6.0 allows remote attackers to inject arbitrary web script or HTML, and hide activities in log files, via a "!--" HTML comment in a session...

CVE-2005-1969

The CVE-2005-1969 entry describes a cross-site scripting (XSS) vulnerability in Pragma Systems Telnetserver 6.0 that allows remote attackers to inject arbitrary web script or HTML and hide activities in log files by inserting an HTML comment "

Pragma TelnetServer crossite scripting

Crossite scripting if log files are stored in HTML format...

CVE-2005-1909

The web server control panel in 602LAN SUITE 2004 allows remote attackers to make it more difficult for the administrator to read portions of log files via a "!-" sequence in an HTTP GET request in the logon, possibly due to a cross-site scripting XSS vulnerability...

CVE-2005-1909

The CVE-2005-1909 entry concerns the 602LAN SUITE 2004 web server control panel where remote attackers can disrupt administrator log readability by sending a GET request containing a

PHP Stat Administrative User Authentication Bypass

=========================================================== ============================================================ Title: PHP Stat Vulnerability discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 25/05/2005 Severity: Medium. PHP Stat Administrative User Authentication...

CVE-2005-0392

CVE-2005-0392 is a local privilege-escalation flaw in the ppxp PPP program where root privileges are not dropped when opening potentially user-supplied log files, enabling an unprivileged user to trigger a root shell. This is discussed in Debian advisories DSA-725-1/DSA-725-2 and mirrored in Open...

CVE-2005-0392

ppxp does not drop root privileges before opening log files, which allows local users to execute arbitrary commands...

CVE-2005-0392

ppxp does not drop root privileges before opening log files, which allows local users to execute arbitrary commands...

CVE-2005-1606

H-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in plaintext in world-readable log files, which allows local users to gain privileges...

CVE-2005-1606

H-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in plaintext in world-readable log files, which allows local users to gain privileges...

CVE-2005-1606

CVE-2005-1606 affects H-Sphere Winbox 2.4.2 and 2.4.3 RC1. The underlying issue is that usernames and passwords are stored in plaintext in world-readable log files, enabling local users to gain privileges. The documents do not provide explicit exploit details, affected components beyond the log l...

CVE-2005-1516

DList dlist.exe in DMail 3.1a allows remote attackers to bypass authentication, read log files, and shutdown the system via a sendlog command with an incorrect password hash, which is not properly handled by the cmdsendlog function...

CVE-2005-1516

The CVE-2005-1516 issue affects NetWin DMail 3.1a’s DList component. The vulnerability enables a remote attacker to bypass authentication, read log files, and shut down the system by sending a log request (sendlog) with an incorrect password hash, which is not properly handled by the internal _cm...