CVE-2012-5638

The setuplogging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations...

CVE-2012-5638

The setuplogging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations...

CVE-2012-5638

CVE-2012-5638 concerns SANLock: the setup_logging function in log.h creates /var/log/sanlock.log with world-writable permissions, enabling a local user to overwrite log content or bypass quota constraints via standard filesystem writes. The issue is evidenced in multiple sources (NVD/NVD-derived ...

CVE-2012-0961

Apt 0.8.16exp5ubuntu13.x before 0.8.16exp5ubuntu13.6, 0.8.16exp12ubuntu10.x before 0.8.16exp12ubuntu10.7, and 0.9.7.5ubuntu5.x before 0.9.7.5ubuntu5.2, as used in Ubuntu, uses world-readable permissions for /var/log/apt/term.log, which allows local users to obtain sensitive shell information by...

grinder: /var/lib/pulp/cache/grinder directory is world-writeable

Grinder in Red Hat CloudForms before 1.1 uses world-writable permissions for /var/lib/pulp/cache/grinder/, which allows local users to modify grinder cache files...

pulp /etc/pulp/pulp.conf world readable, contains default admin password

Pulp in Red Hat CloudForms before 1.1 uses world-readable permissions for pulp.conf, which allows local users to read the administrative password by reading this file...

katello: pulp admin password logged in plaintext in world-readable katello/production.log

Pulp in Red Hat CloudForms before 1.1 logs administrative passwords in a world-readable file, which allows local users to read pulp administrative passwords by reading production.log...

sanlock world writable /var/log/sanlock.log

The setuplogging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations...

Oracle Exadata Leaf Switch Weak Logins

Oracle Exadata leaf switch logins From Oracle.com "Oracle Exadata is the only database machine that provides extreme performance for both data warehousing and OLTP applications, making it the ideal platform for consolidating on private clouds. It is a complete package of servers, storage,...

Wordpress Plugin plg_novana Sql Injection Vulnerability

WordPress Plg Novana third party plugin suffers from a remote SQL injection vulnerability. Exploit Title : Wordpress plgnovana plugin Sql Injection Exploit Author : Ashiyane Digital Security Team Discovered By : sil3nt Home : www.ashiyane.org Security Risk : High - SQL Injection Dork :...

Fedora 17 : openvswitch-1.4.2-5.fc17 (2012-17477)

Don't create world-writable pki//incoming directory Don't add iptables accept rule for -p GRE as GRE tunneling is unsupported Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean a...

CVE-2012-4518

ibacm 1.0.7 creates files with world-writable permissions, which allows local users to overwrite the ibacm daemon log or ibacm.port file...

Arbitrary file deletion

ibacm 1.0.7 creates files with world-writable permissions, which allows local users to overwrite the ibacm daemon log or ibacm.port file...

CVE-2012-4518

CVE-2012-4518 affects ibacm 1.0.7, where files are created with world-writable permissions. This allows local users to overwrite the ib_acm daemon log or ibacm.port, enabling potential local impact. The connected Nessus entries corroborate the issue as part of MiracleLinux/Oracle Linux advisories...

CVE-2012-4518

ibacm 1.0.7 creates files with world-writable permissions, which allows local users to overwrite the ibacm daemon log or ibacm.port file...

PT-2012-5456 · Intel +2 · Ibacm +2

Name of the Vulnerable Software and Affected Versions: ibacm version 1.0.7 Description: The issue allows local users to overwrite the ib acm daemon log or ibacm.port file due to world-writable permissions set by ibacm 1.0.7. Recommendations: For ibacm version 1.0.7, consider changing the file...

World Health Organization website hacked by NullCrew

A well known hacking group "Nullcrew" once again most active hacking group right now. Dumping database from number of websites daily. Their latest target was World Health Organization WHO website. Well, World Health Organization website who.int need treatment now, because their admin panel...

rhncfg: Insecure permissions used for /var/log/rhncfg-actions file

Red Hat Network RHN Configuration Client rhncfg-client in rhncfg before 5.10.27-8 uses weak permissions world-readable for /var/log/rhncfg-actions, which allows local users to obtain sensitive information about the rhncfg-client actions by reading the file...

Fedora 17 : dracut-018-105.git20120927.fc17 (2012-14953)

dracut-018-105.git20120927 - enable the use of the nbd port with e.g. '-N ltsp' - actually make resetoverlay working for squash overlays - fixed FIPS - if any mdraid found, make dracut run on shutdown - make the initramfs non-world readable Note that Tenable Network Security has extracted the...

Oracle website saying - "Hello World" , is it a Hack ?

This afternoon I just got a ping from one of my Friend that Oracle website compromised. Its hard to believe that ORACLE can be compromised ? So lets explore that what going on: Oracle.com , Website Oracle Corporation , an American multinational computer technology corporation that specializes in...