CVE-2005-1855

Backup Manager backup-manager before 0.5.8 creates backup files with world-readable default permissions, which allows local users to obtain sensitive information...

DEBIAN-CVE-2005-1856

The CD-burning feature in backup-manager 0.5.8 and earlier uses a fixed filename in a world-writable directory for logging, which allows local users to overwrite files via a symlink attack...

CVE-2005-1856

The CD-burning feature in backup-manager 0.5.8 and earlier uses a fixed filename in a world-writable directory for logging, which allows local users to overwrite files via a symlink attack...

Debian DSA-787-1 : backup-manager - insecure permissions and tempfile

Two bugs have been found in backup-manager, a command-line driven backup utility. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-1855 Jeroen Vermeulen discovered that backup files are created with default permissions making them world readable, eve...

CVE-2005-1855

CVE-2005-1855 affects the Backup Manager (backup-manager) prior to version 0.5.8. The issue arises because backup files are created with world-readable default permissions, allowing local users to access potentially sensitive information. The Debian OpenVAS/NVD entries confirm the same behavior. ...

CVE-2005-1855

Backup Manager backup-manager before 0.5.8 creates backup files with world-readable default permissions, which allows local users to obtain sensitive information...

CVE-2005-1855

Backup Manager backup-manager before 0.5.8 creates backup files with world-readable default permissions, which allows local users to obtain sensitive information...

CVE-2005-1856

The CD-burning feature in backup-manager 0.5.8 and earlier uses a fixed filename in a world-writable directory for logging, which allows local users to overwrite files via a symlink attack...

CVE-2005-2639

Buffer overflow in Chris Moneymaker's World Poker Championship 1.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long nickname...

CVE-2005-2639

Buffer overflow in Chris Moneymaker's World Poker Championship 1.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long nickname...

CVE-2005-2639

CVE-2005-2639 describes a buffer overflow in Chris Moneymaker's World Poker Championship 1.0 that can be triggered by a long nickname, enabling remote attackers to cause a denial of service and potentially execute arbitrary code. The CVSS v2 base score is 7.5 (HIGH) with network access, low attac...

[Full-disclosure] Buffer-overflow in Chris Moneymaker's World Poker Championship 1.0

Luigi Auriemma Application: Chris Moneymaker's World Poker Championship http://moneymakergaming.com Versions: 1.0 Platforms: Windows Bug: buffer-overflow Exploitation: remote, versus server Date: 17 Aug 2005 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1...

Chris Moneymakers World Poker Championship 1.0 DoS Exploit

Exploit for unknown platform in category dos / poc ========================================================== Chris Moneymakers World Poker Championship 1.0 DoS Exploit ========================================================== / by Luigi Auriemma / include include ifdef WIN32 include / Header fi...

Corsaire Security Advisory: HP Ignite-UX filesystem permissions issue

-- Corsaire Security Advisory -- Title: HP Ignite-UX filesystem permissions issue Date: 23.11.04 Application: HP Ignite-UX prior to version C.6.2.241 Environment: HP-UX Author: Martin O'Neal [email protected] Audience: General distribution Reference: c041123-002 -- Scope -- The aim of thi...

CVE-2004-2337

The /.inlook/.crypt file for inlook 0.7.3 and earlier is installed with world readable permissions, which allows local users to obtain user POP3 credentials...

CVE-2005-2582

Kaspersky Anti-Virus for Unix/Linux File Servers 5.0-5 uses world-writable permissions for the 1 log and 2 license directory, which allows local users to delete log files, append to arbitrary files via a symlink attack on kavmonitor.log, or delete license keys and prevent keepup2date from properl...

CVE-2004-2337

The CVE-2004-2337 entry concerns the file /.inlook/.crypt in inlook 0.7.3 and earlier, which is installed with world readable permissions. This allows local users to access POP3 credentials stored by the application. The root cause is improper permissions on the .crypt file, leading to confidenti...

CVE-2004-2303

MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permissions, which allows local users to read and overwrite files...

CVE-2002-2118

Buffer overflow in Blue World Lasso Web Data Engine 3.6.5 allows remote attackers to cause a denial of service via a long URL...

CVE-2002-2118

CVE-2002-2118 affects Blue World Lasso Web Data Engine 3.6.5. A buffer overflow in the URL handling allows remote attackers to trigger a denial of service. The available description confirms a network-facing vector via a long URL, with impact limited to DoS; no additional exploit details, affecte...