9436 matches found
snmp.writable.txt
Days ago, there was a discussion about world-readable snmp communities, some people thought it was bad enough. Amazingly, I've found that a lot of network devices such as intelligent switches, WAN/LAN routers, ISDN/DSL modems, remote access machines and even some user-end operating systems are by...
SCO Unixware 7.1/7.1.1 - ARCserver /tmp Symlink
source: https://www.securityfocus.com/bid/988/info A symlink following vulnerability exists in the ARCserve agent, as shipped with SCO Unixware 7. Upon startup, the asagent program will create several files in /tmp. These are created mode 777, and can be removed and replaced by any user on the...
SCO Unixware 7.17.1.1 - ARCserver tmp Symlink
SCO Unixware 7.17.1.1 - ARCserver tmp Symlink source: https://www.securityfocus.com/bid/988/info A symlink following vulnerability exists in the ARCserve agent, as shipped with SCO Unixware 7. Upon startup, the asagent program will create several files in /tmp. These are created mode 777, and can...
Ascom COLTSOHO Brocade Fabric OS MatchBox Win98NT4 Solaris Xyplex - SNMP World Writeable Community
Ascom COLTSOHO Brocade Fabric OS MatchBox Win98NT4 Solaris Xyplex - SNMP World Writeable Community Ascom COLTSOHO 2.0.21,Brocade Fabric OS 2.1.2,Cisco IOS 11.2,Cray MatchBox Router 2.0.1,Windows 98,Windows NT 4.0,Solaris 2.6,Xyplex Router 6.1.1 SNMP World Writeable Community Vulnerability source:...
CVE-2000-0145
The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions...
PT-2000-1130 · Debian +1 · Debian +2
Name of the Vulnerable Software and Affected Versions: gnucash affected versions not specified Description: The issue concerns the libguile.so library file used by gnucash, which is installed with world-writable permissions in Debian GNU/Linux. This could potentially allow unauthorized...
CVE-1999-0712
CVE-1999-0712 affects Caldera Open Administration System (COAS). The vulnerability allows the /etc/shadow password file to be made world-readable, indicating a confidentiality impact. Exploitation details are not provided in the connected documents; sources (Red Hat, CVE entries, and PT Security)...
CVE-1999-0712
A vulnerability in Caldera Open Administration System COAS allows the /etc/shadow password file to be made world-readable...
CVE-1999-0712: Undefined Security Weakness
A vulnerability in Caldera Open Administration System COAS allows the /etc/shadow password file to be made world-readable...
CVE-1999-0527: Undefined Security Weakness
The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten...
CVE-1999-0554: Undefined Security Weakness
NFS exports system-critical data to the world, e.g. / or a password file...
CVE-1999-0408
Files created from interactive shell sessions in Cobalt RaQ microservers e.g. .bashhistory are world readable, and thus are accessible from the web server...
CVE-1999-0408: Undefined Security Weakness
Files created from interactive shell sessions in Cobalt RaQ microservers e.g. .bashhistory are world readable, and thus are accessible from the web server...
CVE-1999-0982: Undefined Security Weakness
The Sun Web-Based Enterprise Management WBEM installation script stores a password in plaintext in a world readable file...
glFTPd 1.17.2 - Code Execution
glFTPd 1.17.2 - Code Execution source: https://www.securityfocus.com/bid/891/info GlFtpd is a popular alternative to the mainstream unix ftp daemons and is currently in wide use on the internet. There are three known serious vulnerabilities in GlFtpd. The first problem is an account which is...
glFTPd 1.17.2 - Code Execution
source: https://www.securityfocus.com/bid/891/info GlFtpd is a popular alternative to the mainstream unix ftp daemons and is currently in wide use on the internet. There are three known serious vulnerabilities in GlFtpd. The first problem is an account which is created by default upon installatio...
CVE-2000-0361
The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information...
CVE-1999-0982
The Sun Web-Based Enterprise Management WBEM installation script stores a password in plaintext in a world readable file...
PT-1999-1502 · Sun · Sun Wbem
Name of the Vulnerable Software and Affected Versions: Sun Web-Based Enterprise Management WBEM affected versions not specified Description: The issue concerns the storage of a password in plaintext within a world-readable file by the Sun Web-Based Enterprise Management WBEM installation script...