79 matches found
Sawmill Enterprise < 8.1.7.3 - Multiple Vulnerabilities
No description provided by source. SEC Consult Security Advisory 20101021-0 ======================================================================= title: Multiple critical vulnerabilities product: Sawmill - Universal Log File Analysis vulnerable version: Sawmill Enterprise v8.1.7.3 fixed version...
Flowerfire Sawmill 5.0.21 File Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1402/info Sawmill is a site statistics package for Unix, Windows and Mac OS. A specially crafted request can disclose the first line of any world readable file for which the full pathname is known, for example /etc/passwd...
Sawmill 6.2.x AdminPassword Insecure Default Permissions Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4077/info Sawmill is commercial log analysis software. It runs on most Unix and Linux variants, Microsoft Windows NT/2000 operating systems and MacOS. Sawmill creates the file AdminPassword with insecure default permissio...
Flowerfire Sawmill 5.0.21 Weak Password Encryption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1403/info Sawmill is a site statistics package for Unix, Windows and Mac OS. Passwords are encrypted using a weak hash function. This combined with the file disclosure vulnerability in Sawmill bid = 1402 could allow an...
CVE-2013-4947
Unspecified vulnerability in the update and build database page in Sawmill before 8.6.3 allows remote attackers to have unknown impact and attack vectors...
Code injection
Unspecified vulnerability in the update and build database page in Sawmill before 8.6.3 allows remote attackers to have unknown impact and attack vectors...
CVE-2013-4947
CVE-2013-4947 concerns Sawmill’s update/build database page, with the vulnerable condition described as affecting Sawmill versions 8.6.2 and earlier. Connected sources indicate a remote vulnerability with unspecified impact and attack vectors, and do not provide concrete root-cause details. The p...
CVE-2013-4947
Unspecified vulnerability in the update and build database page in Sawmill before 8.6.3 allows remote attackers to have unknown impact and attack vectors...
KLA10318 Vulnerability in Sawmill
An unspecified vulnerability was found in Sawmill. By exploiting this vulnerability malicious users can cause unknown impact. This vulnerability can be exploited remotely via unknown vectors. Original advisories - Related products Sawmill CVE list CVE-2013-4947 high Solution Update to latest...
Sawmill 8.x < 8.1.7.3 Arbitrary File Disclosure
The version of Sawmill running on the remote host fails to properly restrict access to critical functions to an unauthorized user. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to read arbitrary files from the remote system. Note that the version of Sawmil...
SEC Consult SA-20101021-0 :: Multiple critical vulnerabilities in Sawmill log analysis software
SEC Consult Security Advisory 20101021-0 ======================================================================= title: Multiple critical vulnerabilities product: Sawmill - Universal Log File Analysis vulnerable version: Sawmill Enterprise v8.1.7.3 fixed version: v8.1.7.3 impact: critical homepag...
Sawmill Enterprise Code Execution / Cross Site Request Forgery / Cross Site Scripting
SEC Consult Security Advisory ======================================================================= title: Multiple critical vulnerabilities product: Sawmill - Universal Log File Analysis vulnerable version: Sawmill Enterprise v8.1.7.3 fixed version: v8.1.7.3 impact: critical homepage:...
Sawmill Enterprise < v8.1.7.3 Multiple Vulnerabilities
Exploit for unknown platform in category shellcode ====================================================== Sawmill Enterprise v8.1.7.3 Multiple Vulnerabilities ====================================================== ======================================================================= title:...
Sawmill Detection
This host is running Sawmill, a hierarchical log analysis tool. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Sawmill Multiple Security Vulnerabilities
Sawmill is prone to multiple security vulnerabilities, including unauthorized- access, security-bypass, and cross-site-scripting issues. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
Sawmill Enterprise < 8.1.7.3 - Multiple Vulnerabilities
SEC Consult Security Advisory ======================================================================= title: Multiple critical vulnerabilities product: Sawmill - Universal Log File Analysis vulnerable version: Sawmill Enterprise v8.1.7.3 fixed version: v8.1.7.3 impact: critical homepage:...
Sawmill Enterprise 8.1.7.3 - Multiple Vulnerabilities
Sawmill Enterprise 8.1.7.3 - Multiple Vulnerabilities SEC Consult Security Advisory ======================================================================= title: Multiple critical vulnerabilities product: Sawmill - Universal Log File Analysis vulnerable version: Sawmill Enterprise v8.1.7.3 fixed...
Cross site scripting
Cross-site scripting XSS vulnerability in Sawmill before 7.2.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-1079
Cross-site scripting XSS vulnerability in Sawmill before 7.2.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-1079
CVE-2010-1079 : The vulnerability affects Sawmill prior to 7.2.18 and is described as a Cross-site Scripting (XSS) flaw. The root cause is an XSS condition that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. No explicit exploitation steps, affected product...