CVE-2011-0343

Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a default value of -1 to create log files with insecure permissions 07777, which allows local users to read and write to these log files...

CVE-2011-0343

CVE-2011-0343 affects Balabit syslog-ng versions 2.0, 3.0, 3.1, and 3.2 (OSE and PE) when running on FreeBSD or HP-UX . The root cause is improper cast operations that cause syslog-ng to use a default value of -1 to name log files, resulting in insecure permissions (07777) and enabling local user...

CVE-2011-0343

Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a default value of -1 to create log files with insecure permissions 07777, which allows local users to read and write to these log files...

CVE-2011-0343

Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a default value of -1 to create log files with insecure permissions 07777, which allows local users to read and write to these log files...

CVE-2011-0343

Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a default value of -1 to create log files with insecure permissions 07777, which allows local users to read and write to these log files...

CVE-2011-0343: Undefined Security Weakness

Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a default value of -1 to create log files with insecure permissions 07777, which allows local users to read and write to these log files...

PT-2011-2282

Name of the Vulnerable Software and Affected Versions Balabit syslog-ng versions 2.0, 3.0, 3.1, 3.2 OSE and PE Description The issue is related to improper cast operations when running on certain operating systems, resulting in the creation of log files with insecure permissions. This allows loca...

syslog-ng wrong file permission vulnerability

========================================================================== syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE = Information leak, access prevention and possible priviledge escalation CVE-2011-0343 ========================================================================== 1. OVERVIEW Versions...

syslog-ng weak permissions

On some platforms syslog files are created with 07777 permissions...

WiPhire : A Wireless Penetration Testing Tool !

If you are active in the wireless penetration testing field, you must have seen a few scripts that either help you crack Wired Equivalent Privacy WEP. You also must have seen a few scripts that help you perform MITM attacks. But, not scripts that help you crack WEP and help you with MITM at the...

OCS Inventory NG Agent 'Backend.pm' Perl Module Handling Code Execution Vulnerability

OCS Inventory NG Agent is prone to a vulnerability that lets local attackers execute arbitrary Perl code. Local attackers can leverage this issue to execute arbitrary code via the application's insecure Perl module search path. This may allow attackers to elevate their privileges and compromise t...

OCS Inventory NG Agent 'Backend.pm' Perl Module Handling Code Execution Vulnerability

OCS Inventory NG Agent is prone to a vulnerability that lets local attackers execute arbitrary Perl code. This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Ettercap NG 0.7.3 DLL Hijacking Exploit

/ Exploit Title: Ettercap NG-0.7.3 DLL hijacking wpcap.dll Date: 25/08/2010 Author: REMOVED BY REQUEST OF AUTHOR Tested on: Windows XP SP3 Vulnerable extensions: .pcap Compile and rename to wpcap.dll, create a file in the same dir .pcap extension and visit http://chaossecurity.wordpress.com/ /...

Ettercap NG-0.7.3 DLL Hijacking Exploit (wpcap.dll)

Exploit for windows platform in category local exploits =================================================== Ettercap NG-0.7.3 DLL Hijacking Exploit wpcap.dll =================================================== / Exploit Title: Ettercap NG-0.7.3 DLL hijacking wpcap.dll Date: 25/08/2010 Tested on:...

Ettercap NG-0.7.3 - wpcap.dll DLL Hijacking

Ettercap NG-0.7.3 - wpcap.dll DLL Hijacking / Exploit Title: Ettercap NG-0.7.3 DLL hijacking wpcap.dll Date: 25/08/2010 Author: Anonymous Tested on: Windows XP SP3 Vulnerable extensions: .pcap Compile and rename to wpcap.dll, create a file in the same dir .pcap extension and visit...

Ettercap NG-0.7.3 - 'wpcap.dll' DLL Hijacking

/ Exploit Title: Ettercap NG-0.7.3 DLL hijacking wpcap.dll Date: 25/08/2010 Author: Anonymous Tested on: Windows XP SP3 Vulnerable extensions: .pcap Compile and rename to wpcap.dll, create a file in the same dir .pcap extension and visit http://chaossecurity.wordpress.com/ / include define...

Fedora 11 : ocsinventory-1.02.3-1.fc11 (2010-1540)

Multiple vulnerabilities have been discovered in OCS Inventory NG, which can be exploited by malicious users to conduct SQL injection attacks and by malicious people to conduct cross-site scripting attacks. Note that Tenable Network Security has extracted the preceding description block directly...

Fedora 12 : ocsinventory-1.02.3-1.fc12 (2010-1535)

Multiple vulnerabilities have been discovered in OCS Inventory NG, which can be exploited by malicious users to conduct SQL injection attacks and by malicious people to conduct cross-site scripting attacks. Note that Tenable Network Security has extracted the preceding description block directly...

OCS Inventory NG Multiple SQL Injection Vulnerabilities

This host is running OCS Inventory NG and is prone to multiple SQL injection vulnerabilities. OpenVAS Vulnerability Test $Id: secpodocsinventoryngmultsqlinjvulnmay10.nasl 5394 2017-02-22 09:22:42Z teissa $ OCS Inventory NG Multiple SQL Injection Vulnerabilities Authors: Madhuri D Copyright:...

OCS Inventory NG < 1.02.3 Multiple SQLi Vulnerabilities

OCS Inventory NG is prone to multiple SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...