CVE-2006-2442

CVE-2006-2442 affects KPhone, a KDE VoIP client. The issue: kphone 4.2 creates the configuration file .qt/kphonerc with world-readable permissions, allowing local users to read usernames and SIP passwords. Connected advisories (Mandriva/MK, Debian DSA-1062-1, SUSE) confirm the root cause and stat...

CVE-2006-2045

The 1 shadow password file in na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 has world readable permissions, which allows local users to view encrypted passwords; and the 2 NetAccess database file has world readable and writable permissions, which allows local users to view sensitive...

Default credentials

The 1 shadow password file in na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 has world readable permissions, which allows local users to view encrypted passwords; and the 2 NetAccess database file has world readable and writable permissions, which allows local users to view sensitive...

CVE-2006-2045

The 1 shadow password file in na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 has world readable permissions, which allows local users to view encrypted passwords; and the 2 NetAccess database file has world readable and writable permissions, which allows local users to view sensitive...

CVE-2006-2045

CVE-2006-2045 concerns IP3 Networks NetAccess NA75. The shadow password file in na-img-4.0.34.bin is world-readable, enabling local users to view encrypted passwords; the NetAccess database file is world-readable and world-writable, enabling local users to view sensitive data and modify it. No ex...

CVE-2006-1830

Sun Java Studio Enterprise 8, when installed as root, creates certain files with world-writable permissions, which allows local users to execute arbitrary commands via unspecified vectors...

Design/Logic Flaw

Sun Java Studio Enterprise 8, when installed as root, creates certain files with world-writable permissions, which allows local users to execute arbitrary commands via unspecified vectors...

DEBIAN-CVE-2006-1844

The Debian installer for the 1 shadow 4.0.14 and 2 base-config 2.53.10 packages includes sensitive information in world-readable log files, including preseeded passwords and pppoeconf passwords, which might allow local users to gain privileges...

CVE-2006-1830

Sun Java Studio Enterprise 8, when installed as root, creates certain files with world-writable permissions, which allows local users to execute arbitrary commands via unspecified vectors...

CVE-2006-1830

Sun Java Studio Enterprise 8 is affected by CVE-2006-1830: when installed as root it creates certain files with world-writable permissions, enabling local users to execute arbitrary commands via unspecified vectors. The NVD entry documents this behavior and impact, with low base score (0.7) on CV...

Sun Java Studio Enterprise weak file permissions

Some files are installed world-writable...

Default credentials

debconf in Debian GNU/Linux, when configuring mnogosearch in the mnogosearch-common 3.2.31-1 package, uses the world-readable config.dat file instead of the restricted passwords.dat for storing the cleartext database administrator password in the mnogosearch-common/databaseadminpass record, which...

WD-TMPLH.txt

!/usr/bin/perl -w PHPLiveHelper 1.8 remote command execution Xploit Discovered & Coded By rUnViRuS World Defacers TeaM WD-members: rUnViRuS - Papipsycho - r3v3ng4ns Details ======= Note : PHPLiveHelper 1.8 is vulnerable too, but its just that you cannot include file remotly...

CVE-2006-1574

Cross-site scripting XSS vulnerability in Groupmax World Wide Web, World Wide Web Desktop, World Wide Web for Scheduler, and Desktop for Scheduler, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

[SA19483] Groupmax World Wide Web Cross-Site Scripting Vulnerability

TITLE: Groupmax World Wide Web Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA19483 VERIFY ADVISORY: http://secunia.com/advisories/19483/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Groupmax World Wide Web for Scheduler 3.x...

samba -- Exposure of machine account credentials in winbind log files

Samba Security Advisory: The machine trust account password is the secret shared between a domain controller and a specific member server. Access to the member server machine credentials allows an attacker to impersonate the server in the domain and gain access to additional information regarding...

TFTP Weak Directory Permissions (HP Ignite-UX) - Active Check

The remote host has a vulnerable version of the HP Ignite-UX application installed that exposes a world-writeable directory to anonymous TFTP access. SPDX-FileCopyrightText: 2005 Corsaire Limited Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

FTP Writeable Directories

The remote FTP server contains world-writeable files. By crawling through the remote FTP server, several directories were marked as being world writeable. SPDX-FileCopyrightText: 2006 TNS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

CVE-2006-1376

The installation of Debian GNU/Linux 3.1r1 from the network install CD creates /var/log/debian-installer/cdebconf with world writable permissions, which allows local users to cause a denial of service disk consumption...

Design/Logic Flaw

The installation of Debian GNU/Linux 3.1r1 from the network install CD creates /var/log/debian-installer/cdebconf with world writable permissions, which allows local users to cause a denial of service disk consumption...