CVE-2002-0265

The CVE-2002-0265 issue affects Sawmill for Solaris

CVE-2002-0265

Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable permissions, which allows local users to gain privileges by modifying the file...

Слабые разрешения в Sawmill под Solaris

Пароль сохраняется в файле открытом на чтение/запись...

Vulnerability in Sawmill for Solaris v. 6.2.14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 = Warped Force Advisory 2 = Subject: Vulnerability in Sawmill for Solaris v. 6.2.14 Author: darky0da [email protected] Discovered: 2.8.02 Announced to BugTraq: 2.11.02 Vendor Status: Vendor notified on 2.9.02 and verified issue. Upgrade v. 6.2.15...

Sawmill 6.2.x - Admin Password Insecure Default Permissions

Sawmill 6.2.x - Admin Password Insecure Default Permissions source: https://www.securityfocus.com/bid/4077/info Sawmill is commercial log analysis software. It runs on most Unix and Linux variants, Microsoft Windows NT/2000 operating systems and MacOS. Sawmill creates the file AdminPassword with...

CVE-2000-0588

SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration commands...

CVE-2000-0588

SawMill 5.0.21 CGI is affected by an information disclosure vulnerability where remote, unauthenticated attackers can read the first line of arbitrary files by supplying a target file in the rfcf parameter. SawMill processes the parameter contents as configuration commands, enabling path traversa...

CVE-2000-0589

SawMill 5.0.21 is affected by a weakness in how it stores passwords, enabling an attacker to decrypt the administrative password and modify the SawMill configuration. The vulnerability stems from weak encryption/hash usage, facilitating information disclosure and potential configuration tampering...

sawmill-5.0.21.txt

Version: Sawmill 5.0.21 Vendor: Notified. Link: http://www.flowerfire.com/sawmill [email protected] http://vapid.betteros.org SawMill is a site log statistics package for UNIX, Windows and MacOS. I have been evaluating it under Linux. In my test configuration I have sawmill listening on port...

sawmill5.0.21 old path bug & weak hash algorithm

Aleph1, Greetings, I did not see this in the archives so I figured I would forward it on. Vendor: Notified. Link: http://www.flowerfire.com/sawmill SawMill is a site log statistics package for UNIX, Windows and MacOS. I have been evaluating it under Linux. In my test configuration I have sawmill...

Дырка в Sawmill

Специальным образом сконструированный GET-запрос позволяет прочитать первую строчку любого файла, причем приложение запускается от root...

Sawmill Weak Password Encryption Scheme Information Disclosure

The version of Sawmill running on the remote web server is affected by an information disclosure vulnerability due to the use of a weak hash function. An unauthenticated, remote attacker can exploit this to obtain the administrative user password. %NASLMINLEVEL 70300 C Tenable Network Security,...

Sawmill File Access Information Disclosure

The remote web server is affected by an information disclosure vulnerability due to improper validation of user-supplied input to the 'rfcf' parameter. An unauthenticated, remote attacker can exploit this, via a crafted request, to disclose the first line of arbitrary files on the remote host...

CVE-2000-0588

SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration commands...

CVE-2000-0589

SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt the password and modify the SawMill configuration...

Flowerfire Sawmill 5.0.21 - Weak Password Encryption

// source: https://www.securityfocus.com/bid/1403/info Sawmill is a site statistics package for Unix, Windows and Mac OS. Passwords are encrypted using a weak hash function. This combined with the file disclosure vulnerability in Sawmill bid = 1402 could allow an attacker to read the contents of...

Flowerfire Sawmill 5.0.21 - File Access

Flowerfire Sawmill 5.0.21 - File Access source: https://www.securityfocus.com/bid/1402/info Sawmill is a site statistics package for Unix, Windows and Mac OS. A specially crafted request can disclose the first line of any world readable file for which the full pathname is known, for example...

Flowerfire Sawmill 5.0.21 - Weak Password Encryption

Flowerfire Sawmill 5.0.21 - Weak Password Encryption // source: https://www.securityfocus.com/bid/1403/info Sawmill is a site statistics package for Unix, Windows and Mac OS. Passwords are encrypted using a weak hash function. This combined with the file disclosure vulnerability in Sawmill bid =...

Flowerfire Sawmill 5.0.21 - File Access

source: https://www.securityfocus.com/bid/1402/info Sawmill is a site statistics package for Unix, Windows and Mac OS. A specially crafted request can disclose the first line of any world readable file for which the full pathname is known, for example /etc/passwd. The output of the request is...