Network Associates ePolicy Orchestrator Agent privilege escalation

By creating junction point NTFS hard link it's possible to access files with privileges of local system...

NAePolicy.txt

Summary: Privilege escalation in Network Associates ePolicy Orchestrator Agent 3.5.0 patch 3 http://www.nai.com/ Details: The ePolicy Orchestrator Agent web server which runs on TCP port 8081 by default and serves the McAfee Agent Activity Log can be used to view files that exist on the same...

CVE-2002-2068

Eraser 5.3 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted...

CVE-2002-2067

East-Tec Eraser 2002 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted...

CVE-2002-2066

BestCrypt BCWipe 1.0.7 and 2.0 through 2.35.1 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted...

CVE-2002-2068

The CVE-2002-2068 entry concerns Eraser 5.3 failing to clear Windows alternate data streams (ADS) attached to NTFS files, enabling recovery of data that should be deleted. Affected software: Eraser 5.3; root cause: ADS not cleared. Impact stated: data that was supposed to be deleted can be recove...

CVE-2002-2069

CVE-2002-2069 affects PGP 6.x and 7.x on Windows NTFS. The issue is failure to clear Windows alternate data streams attached to files, enabling recovery of deleted sensitive information. Connected Red Hat CVE entry corroborates the same description. No explicit exploit details or affected version...

CVE-2002-2066

BestCrypt BCWipe versions 1.0.7 and 2.0 through 2.35.1 do not clear Windows alternate data streams (ADS) on NTFS-attached files, allowing recovery of securely deleted data. Connected sources confirm this vulnerability affects BCWipe on NTFS by failing to purge ADS, with implications of sensitive ...

CVE-2002-2069

PGP 6.x and 7.x does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted...

CVE-2002-2067

East-Tec Eraser 2002 on Windows NTFS fails to clear alternate data streams attached to files, allowing recovery of supposedly deleted sensitive information. Descriptions across NVD, Red Hat, and CVE records confirm the issue and its impact on confidentiality (partial in CVSS v2, high in CVSS v3.1...

CVE-2002-2070

SecureClean 3 build 2.0 does not clear Windows alternate data streams (ADS) attached to files on NTFS, allowing recovery of deleted-sensitive data. The issue is described across multiple sources (NVD, Red Hat, CVE listings) with no explicit patch/version fix provided in the connected documents. I...

CVE-2002-2070

SecureClean 3 build 2.0 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted...

CVE-2001-1515

Macintosh clients, when using NT file system volumes on Windows 2000 SP1, create subdirectories and automatically modify the inherited NTFS permissions, which may cause the directories to have less restrictive permissions than intended...

CVE-2001-1515

This CVE (CVE-2001-1515) affects Windows 2000 SP1 when Macintosh clients access NTFS volumes. The issue arises as subdirectories created by Macintosh clients automatically modify inherited NTFS permissions, potentially giving less restrictive permissions than intended. Documented by multiple sour...

Microsoft Windows NTFS Information Disclosure

Microsoft Windows NTFS Information Disclosure I. Synopsis Affected Systems: Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Risk: Moderate Impact: Local Information Leak Status: Maintenance Release Planned Uncoordinated release Author: Matthew Murphy [email protected]...

Invision Power Board 2.0.3 - 'login.php' SQL Injection

!/usr/bin/perl -w This one actually works : Just paste the outputted cookie into your request header using livehttpheaders or something and you will probably be logged in as that user. No need to decrypt it! Exploit coded by "Tony Little Lately" and "Petey Beege" use LWP::UserAgent; $ua = new...

CVE-2005-1098

GetDataBack for NTFS 2.31 stores the username and license key in plaintext in the Name value in the License registry key, which may allow local users to obtain sensitive information...

CVE-2005-1098

GetDataBack for NTFS 2.31 stores the username and license key in plaintext in the License registry key Name value, enabling local users to obtain sensitive information. The root cause is insecure storage of credentials in the registry, leading to potential information disclosure with Local access...

GetDataBack Data Recovery 2.31 - Licence Recover

GetDataBack Data Recovery 2.31 - Licence Recover / GetDataBack for NTFS v2.31 Local Exploit by Kozan Application: GetDataBack for NTFS v2.31 Vendor: www.runtime.org - Runtime Software Vulnerable Description: GetDataBack for NTFS v2.31 discloses licence informaations username and key to local user...

GetDataBack Data Recovery 2.31 - Licence Recover

/ GetDataBack for NTFS v2.31 Local Exploit by Kozan Application: GetDataBack for NTFS v2.31 Vendor: www.runtime.org - Runtime Software Vulnerable Description: GetDataBack for NTFS v2.31 discloses licence informaations username and key to local users. Discovered & Coded by: Kozan Credits to ATmaCA...