2380 matches found
Then talk about web invasion-on the 1 6 3. net serious security vulnerability-vulnerability warning-the black bar safety net
Green Corps once the media announced a data 9 0% of the sites there is a security vulnerability, I write the purpose of this article is not to tell you how to invade a site, just come up with some of their own experience and share with everyone. At the same time when you see this article when you...
Microsoft IIS Translate f: ASP/ASA Source Disclosure (IIS 5.1)
There is a serious vulnerability in IIS 5.1 that allows an attacker to view ASP/ASA source code instead of a processed file, when the files are stored on a FAT partition. ASP source code can contain sensitive information such as username's and passwords for ODBC connections. %NASLMINLEVEL 70300 C...
CVE-2003-0951
Partition Manager parmgr in HP-UX B.11.23 does not properly validate certificates that are provided by the cimserver, which allows attackers to obtain sensitive data or gain privileges...
Abyss webserver FAT partition protection bypass
Under linux, it's possible to access protected located on FAT partition by appending dot to filename...
CVE-2003-0951
Partition Manager parmgr in HP-UX B.11.23 does not properly validate certificates that are provided by the cimserver, which allows attackers to obtain sensitive data or gain privileges...
The default NTFS permissions are not applied to a converted boot partition on Microsoft Windows 2000 and Windows XP systems when CONVERT.EXE is used
Overview Several commercial desktops and laptops from OEM distributors ship with insecure permissions set on files and directories. It has been confirmed that this is due to the use of Microsoft's CONVERT.EXE utility. Description Microsoft's CONVERT.EXE program is used to convert FAT32 file syste...
Windows 2000 system partition weak default permissions
Everyone/Full Control permission allows to change initiall boot files regardless of individual file permissions...
CVE-2001-0709
Vulnerability summary (CVE-2001-0709): Microsoft IIS 4.0 and earlier, when installed on a FAT partition, is susceptible to remote disclosure of ASP source code. An attacker can obtain the source by requesting a URL encoded with Unicode. The description in the provided documents confirms the expos...
CVE-2001-0709: Undefined Security Weakness
Microsoft IIS 4.0 and before, when installed on a FAT partition, allows a remote attacker to obtain source code of ASP files via a URL encoded with Unicode...
CVE-2001-0624
QNX 2.4 allows a local user to read arbitrary files by directly accessing the mount point for the FAT disk partition, e.g. /fs-dos...
CVE-2001-0624
CVE-2001-0624 affects QNX 2.4. A local user can read arbitrary files by directly accessing the FAT disk partition mount point, e.g., /fs-dos. The root cause is an unprotected mount point that exposes file contents to a local user. The impact is partial confidentiality of files. No remediation or ...
CVE-2001-0421
FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by providing a valid username with an invalid password followed by a CWD command, which could release sensitive information such as shadowed...
CVE-2001-0421: Undefined Security Weakness
FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by providing a valid username with an invalid password followed by a CWD command, which could release sensitive information such as shadowed...
QNX RTOS 2.4 - File Disclosure
source: https://www.securityfocus.com/bid/6751/info A vulnerability has been discovered in QNX Real-Time Operating System. It has been reported that an unauthorized user may access arbitrary files. This is possible by requesting the file through the location that the FAT partition is mounted to...
QNX RTOS 2.4 - File Disclosure
QNX RTOS 2.4 - File Disclosure source: https://www.securityfocus.com/bid/6751/info A vulnerability has been discovered in QNX Real-Time Operating System. It has been reported that an unauthorized user may access arbitrary files. This is possible by requesting the file through the location that th...
TalentSoft Web+ ClientMonitorserver 4.6 - Source Code Disclosure
TalentSoft Web+ ClientMonitorserver 4.6 - Source Code Disclosure source: https://www.securityfocus.com/bid/1722/info Talentsoft Web+ is a web application server that can be integrated with various web technologies. Web+ can be used to display the source code of WML files residing on an NTFS...
Local DoS : RedHat 6.0
Hello, I'm not sure if this problem has ever been addressed or not, but considering that I just spent a day recovering from a corrupted root partition and this can be done by any user with window manager access, I thought this might be worth mentioning anyway. While killing yet another zombie...
sendmail.8.9.1.DoS.txt
Date: Thu, 1 Apr 1999 14:00:16 +0000 From: Lukasz Luzar To: [email protected] Subject: Possible local DoS in sendmail Hi, It seems that sendmail ran with -t option does NOT block SIGINT ... In that moment while we are sending data to its stdin, when we will press CTRL-C process is being killed...
nt.ntfs.mft.txt
Date: Tue, 27 Apr 1999 18:26:54 +0400 From: Vladimir Dubrovin To: [email protected] Subject: MFT problem Hello NTBUGTRAQ, Sorry for my bad English... Some times ago it was noticed the problem with MFT. I don't know if this problem was discussed in this list, so if it is - just...
