CVE-2006-1844: Undefined Security Weakness

The Debian installer for the 1 shadow 4.0.14 and 2 base-config 2.53.10 packages includes sensitive information in world-readable log files, including preseeded passwords and pppoeconf passwords, which might allow local users to gain privileges...

CVE-2005-4683: Undefined Security Weakness

PADL MigrationTools 46, when a failure occurs, stores contents of /etc/shadow in a world-readable /tmp/nis.$$.ldif file, and possibly other sensitive information in other temporary files, which are not properly managed by 1 migrateallonline.sh, 2 migratealloffline.sh, 3 migrateallnetinfoonline.sh...

linux/x86 chmod/etc/shadow, 0666 + exit 32 bytes

linux/x86 chmod/etc/shadow, 0666 + exit 32 bytes. Shellcode exploit for linx86 platform / linux/x86 chmod"/etc/shadow", 0666 + exit - 32 bytes - izik / char shellcode = "\x6a\x0f" // push $0xf "\x58" // pop %eax "\x31\xc9" // xor %ecx,%ecx "\x51" // push %ecx "\x66\xb9\xb6\x01" // mov $0x1b6,%cx...

linux/x86 chmod(/etc/shadow, 0666) + exit() 32 bytes

Exploit for linux/x86 platform in category shellcode ==================================================== linux/x86 chmod/etc/shadow, 0666 + exit 32 bytes ==================================================== / linux/x86 chmod"/etc/shadow", 0666 + exit - 32 bytes - izik / char shellcode = "\x6a\x0...

DEBIAN-CVE-2005-4683

PADL MigrationTools 46, when a failure occurs, stores contents of /etc/shadow in a world-readable /tmp/nis.$$.ldif file, and possibly other sensitive information in other temporary files, which are not properly managed by 1 migrateallonline.sh, 2 migratealloffline.sh, 3 migrateallnetinfoonline.sh...

CVE-2005-4534

The shadow database feature syncshadowdb in Bugzilla 2.9 through 2.16.10 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

SUSE-SA:2005:064: pwdutils, shadow

The remote host is missing the patch for the advisory SUSE-SA:2005:064 pwdutils, shadow. Thomas Gerisch found that the setuid 'chfn' program contained in the pwdutils suite insufficiently checks it's arguments when changing the GECOS field. This bug leads to a trivially exploitable local privileg...

SUSE-SA:2005:062: permissions

The remote host is missing the patch for the advisory SUSE-SA:2005:062 permissions. SUSE LINUX ships with three pre defined sets of permissions, 'easy', 'secure' and 'paranoid'. The chkstat program contained in the permissions package is used to set those permissions to the chosen level. Level...

CVE-2005-2963

The CVE-2005-2963 issue affects the mod_auth_shadow Apache module (versions 1.0–1.5 and 2.0) when AuthShadow is enabled. The vulnerability causes shadow authentication to apply to all locations using the require group directive, potentially bypassing other access controls if credentials match /et...

CVE-2005-2963: Undefined Security Weakness

The modauthshadow module 1.0 through 1.5 and 2.0 for Apache with AuthShadow enabled uses shadow authentication for all locations that use the require group directive, even when other authentication mechanisms are specified, which might allow remote authenticated users to bypass security...

[SECURITY] [DSA 844-1] New mod-auth-shadow packages fix authentication bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 844-1 [email protected] http://www.debian.org/security/ Martin Schulze October 5th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 844-1] New mod-auth-shadow packages fix authentication bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 844-1 [email protected] http://www.debian.org/security/ Martin Schulze October 5th, 2005 http://www.debian.org/security/faq -...

[Full-disclosure] [SECURITY] [DSA 844-1] New mod-auth-shadow packages fix authentication bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 844-1 [email protected] http://www.debian.org/security/ Martin Schulze October 5th, 2005 http://www.debian.org/security/faq -...

DSA-844-1 mod-auth-shadow - programming error

Bulletin has no description...

Debian DSA-844-1 : mod-auth-shadow - programming error

A vulnerability in modauthshadow, an Apache module that lets users perform HTTP authentication against /etc/shadow, has been discovered. The module runs for all locations that use the 'require group' directive which would bypass access restrictions controlled by another authorisation mechanism,...

CVE-2005-2136

Raritan Dominion SX DSX Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set 1 world-readable permissions for /etc/shadow and 2 world-writable permissions for /bin/busybox, which allows local users to obtain hashed passwords or execute arbitrary code as other users...

PT-2005-3068 · Raritan · Raritan Dominion Sx

Name of the Vulnerable Software and Affected Versions: Raritan Dominion SX DSX Console Servers versions DSX16, DSX32, DSX4, DSX8, and DSXA-48 Description: The issue allows local users to obtain hashed passwords or execute arbitrary code as other users due to world-readable permissions for...

CVE-2005-2136: Incorrect Authorization

Raritan Dominion SX DSX Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set 1 world-readable permissions for /etc/shadow and 2 world-writable permissions for /bin/busybox, which allows local users to obtain hashed passwords or execute arbitrary code as other users...

Javamail Multiple Information Disclosure Vulnerabilities

Javamail Multiple Information Disclosure Vulnerabilities May 25, 2005 Yangon, Myanmar. Vulnerable Systems: JavaMail API 1.3 JavaMail API 1.2 JavaMail API 1.1.3 Tested on Apache Tomcat/5.0.16 Possibly on all versions of Windows Failed to restrict to accessing other directory and files in...

Sun JavaMail 1.x - Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/13753/info Sun JavaMail is prone to multiple information disclosure vulnerabilities. The issues exist due to a lack of sufficient input sanitization performed on user-supplied requests. The following issues are reported: A remote attacker may reveal the...