CVE-2002-0294

Alcatel 4400 installs the /chetc/shutdown command with setgid privileges, which allows many different local users to shut down the system...

CVE-2002-0271

Runtime library in GNU Ada compiler GNAT 3.12p through 3.14p allows local users to modify files of other users via a symlink attack on temporary files...

CVE-2001-1281

Web Messaging Server for Ipswitch IMail 7.04 and earlier allows remote authenticated users to change information for other users by modifying the olduser parameter in the "Change User Information" web form...

CVE-2002-0343

CVE-2002-0343 affects Hotline Client 1.8.5, where passwords and other sensitive user data are stored in plaintext in the bookmarks file. The underlying issue is plaintext storage accessible to local users, enabling privilege escalation by extracting passwords from the bookmarks file. Impact is de...

CVE-2001-1258

Horde Internet Messaging Program IMP before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server...

CVE-2002-0202

PaintBBS 1.2 installs certain files and directories with insecure permissions, which allows local users to 1 obtain the encrypted server password via the world-readable oekakibbs.conf file, or 2 modify the server configuration via the world-writeable /oekaki/ folder...

Security holes in 11 products...

adManager : v1.1 Problems : XSS Access to an admin option - MiniBB : v1.2 Problems : XSS Access to admins accounts - Secure - Trackeur - LOGS Problem : Spoofing ---------------More details : -------------- in french : http://www.ifrance.com/kitetoua/tuto/5holes2.txt translated by google :...

CVE-2002-0065

Funk Software Proxy Host 3.x uses weak encryption for the Proxy Host password, which allows local users to gain privileges by recovering the passwords from the PHOST.INI file or the Windows registry...

Unauthorized access to web administration in BackOffice

Any local user including web Guests can perform some administration tasks...

KPMG-2002008: Watchguard SOHO IP Restrictions Flaw

-------------------------------------------------------------------- -=Watchguard SOHO IP Restrictions Flaw=- courtesy of KPMG Denmark BUG-ID: 2002008 Released: 10th Apr 2002 -------------------------------------------------------------------- Problem: ======== A flaw in the Watchguard SOHO...

Security holes in WoltLab Burning Board

Product : WoltLab Burning Board http://www.woltlab.de Versions : 1.1.0 and less Problems : - XSS - Access to users/admins accounts More details in french : http://www.ifrance.com/kitetoua/tuto/wbboard.txt translated by google : http://translate.google.com/translate?u=http3A...

CVE-2002-0040

Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES environment variable, which might allow the users to gain privileges...

CVE-2002-0113

EMC NetWorker formerly Legato NetWorker before 7.0 stores log files in the /nsr/logs/ directory with world-readable permissions, which allows local users to read sensitive information and possibly gain privileges. NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platfo...

CVE-2002-0120

Apple Palm Desktop 4.0b76 and 4.0b77 creates world-readable backup files and folders when a hotsync is performed, which could allow a local user to obtain sensitive information...

Microsoft Windows - Local Users Information : Can't Change Password

Using the supplied credentials, Nessus was able to list local users who can not change their own passwords. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10912; scriptversion"1.21"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows - Loc...

CVE-2002-0114

EMC NetWorker formerly Legato NetWorker before 7.0 stores passwords in plaintext in the daemon.log file, which allows local users to gain privileges by reading the password from the file. NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform...

CVE-2001-1189

IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script...

CVE-2001-1178

Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable...

CVE-2001-1122

CVE-2001-1122 affects Windows NT 4.0 SP 6a. A local user with write access to winnt/system32 can trigger a denial of service (crash of lsass.exe) by running the NT4ALL exploit in ‘SPECIAL’ mode. The issue is described as a local exploit with partial availability impact. The provided documents do ...

Microsoft Windows 'Administrators' Group User List

Using the supplied credentials, it is possible to extract the member list of the 'Administrators' group. Members of this group have complete access to the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10902; scriptversion"1.23"; scriptcvsdate"Date:...