security flaw

prefs.php in SquirrelMail before 1.4.4, with registerglobals enabled, allows remote attackers to inject local code into the SquirrelMail code via custom preference handlers...

[SA13993] ginp Java Preferences API Security Bypass

TITLE: ginp Java Preferences API Security Bypass SECUNIA ADVISORY ID: SA13993 VERIFY ADVISORY: http://secunia.com/advisories/13993/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: ginp 0.x http://secunia.com/product/4566/ DESCRIPTION: A security issue has been reporte...

CVE-2003-0883

The System Preferences capability in Mac OS X before 10.3 allows local users to access secure Preference Panes for a short period after an administrator has authenticated to the system...

CVE-2003-0880

CVE-2003-0880 involves a vulnerability in Mac OS X prior to 10.3 where local users could access Dock functions from behind Screen Effects when Full Keyboard Access is enabled via the Keyboard pane in System Preferences. The description labels the vulnerability as Unknown, with no publicly provide...

CVE-2003-0883

CVE-2003-0883 affects the System Preferences capability in Mac OS X prior to 10.3. Local users can access secure Preference Panes for a short period after an administrator authenticates, exposing partial confidentiality/integrity/availability impacts. The CVSS base score is 4.6 (MEDIUM) with loca...

CVE-2003-0883

The System Preferences capability in Mac OS X before 10.3 allows local users to access secure Preference Panes for a short period after an administrator has authenticated to the system...

CVE-2002-1204

Netscape Communicator 4.x allows attackers to use a link to steal a user's preferences, including potentially sensitive information such as URL history, e-mail address, and possibly the e-mail password, by redefining the userpref function and accessing the prefs.js file, which is stored in a...

CVE-2002-1204

CVE-2002-1204 affects Netscape Communicator 4.x. The vulnerability allows an attacker to steal a user’s preferences (e.g., URL history, e‑mail address, and potentially the e‑mail password) by redefining the user_pref() function and reading prefs.js, which is stored in a directory with a predictab...

CVE-2002-1204

Netscape Communicator 4.x allows attackers to use a link to steal a user's preferences, including potentially sensitive information such as URL history, e-mail address, and possibly the e-mail password, by redefining the userpref function and accessing the prefs.js file, which is stored in a...

CVE-2001-0438

Preview version of Timbuktu for Mac OS X allows local users to modify System Preferences without logging in via the About Timbuktu menu...

CVE-2001-0438

The CVE-2001-0438 entry concerns Timbuktu for Mac OS X where a local user can modify System Preferences via the About Timbuktu menu without authentication. Affected component: Timbuktu on macOS (Preview version). Root cause details are not elaborated beyond the described UI misbehavior. Impact pe...

CVE-2001-0438

Preview version of Timbuktu for Mac OS X allows local users to modify System Preferences without logging in via the About Timbuktu menu...

Mac OS 9 Multiple Users Control Panel Password Vulnerability

Mac OS 9.04 comes with a 'Multiple Users' Control Panel that allows an administrator called 'Owner' to create user accounts called 'Normal' users with limited access to the computer. The problem is that the Owner password can be removed by a Normal user by moving the 'Users & Groups Data File and...

rocketmail.txt

http://securityhole.8m.com/ New Webmail Security Hole Found - 10 April 1999 MAO Enterprises announced today that a security flaw in Rocketmail's free web email services at www.rocketmail.com. If you should happen to know the login name of an account at Rocketmail which has been inactive for a...

CVE-1999-0429

The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mail" preference...

Windows Internet Explorer 7 for Windows XP

This free upgrade to Internet Explorer customers offers improvements such as enhanced security, a cleaner look, and features to make everyday tasks such as printing and searching the web easier. This upgrade preserves your current home page, search settings, favorites, and compatible toolbars, an...