1749 matches found
imlock2006.txt
IM Lock 2006 - Insecure Registry Permission Vulnerability --------------------------------------------------------- Application: IM Lock 2006 Vendor: www.comvigo.com Corporation: Comvigo, Inc. Version: Latest: 2 March 2006 - Home Edition, Enterprise & Professional Description: IM Lock 2006...
Webroot Desktop Firewall buffer overflow
Buffer overflow on deleting application from the list of allowed programs. It's possible for non-privileged users to disable the firewall even when password protection has been enabled, by sending specific DeviceIoControl commands to the firewall driver...
Movable Type < 3.2 Multiple Vulnerabilities
The version of Movable Type installed on the remote host is affected by multiple vulnerabilities : - The application allows an attacker to enumerate valid usernames because its password reset functionality returns different errors depending on whether the supplied username exists. CVE-2005-3101 -...
Hosting Controller < 6.1 Hotfix 2.2 Multiple Vulnerabilities
According to its version number, the installation of Hosting Controller on the remote host is subject to multiple flaws : - Denial of Service Vulnerabilities By accessing the 'editplanopt3.asp', 'planmanager.asp', and 'plansettings.asp' scripts directly or with specific parameters, an attacker ca...
security flaw
The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw devic...
Debian DSA-164-1 : cacti - arbitrary code execution
A problem in cacti, a PHP based frontend to rrdtool for monitoring systems and services, has been discovered. This could lead into cacti executing arbitrary program code under the user id of the web server. This problem, however, is only persistent to users who already have administrator privileg...
ppp-off.txt
Hi, In SlackWare Linux the script /usr/bin/ppp-off writes the output of 'ps x' to /tmp/grep.tmp Since root is the user that runs ppp-off, a non-privileged user could create a link from /tmp/grep.tmp to any file ie: /etc/issue, thus when root runs the ppp-off script, the output of 'ps x' would be...
CVE-2000-0345
The CVE-2000-0345 entry concerns Cisco routers’ on-line help system options. The vulnerability allows non-privileged users, without enabled access, to obtain sensitive information via the show command. The provided data (NVD) notes partial confidentiality impact with local attack vector and low b...
